Description
A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jarikomppa | soloud | 20200207 | — |
References
- VDB-348280 | jarikomppa soloud WAV File soloud_wav.cpp loadwav memory corruption vdb-entry technical-description
- VDB-348280 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #761339 | jarikomppa soloud master-branch Memory Corruption third-party-advisory
- https://github.com/jarikomppa/soloud/issues/401 issue-tracking
- https://github.com/oneafter/0209/blob/main/so2/repro exploit
- https://github.com/jarikomppa/soloud/ product