Skip to content
OpenAdvisories
Unscored DLA-99-1 2 CVEs

flac - security update

Published Dec 5, 2014 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 flac 1.2.1-2+deb6u1

Vulnerabilities 2

  • Unscored —

    Stack-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary co…

  • Unscored —

    Heap-based buffer overflow in stream_decoder.c in libFLAC before 1.3.1 allows remote attackers to execute arbitrary cod…