CVEvulnerability
CVE-2024-21522
7.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-07-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-129
Description
All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder().decode or new OpusDecoder().decodeFloat functions it is not checked for negative values. This can lead to a process crash.
Related
Weakness · CWE (1)
- CWE-129 Improper Validation of Array Index weakness
References
- https://gist.github.com/dellalibera/6bb866ae5d1cc2adaabe27bbd6d2d21e gist.github.com
- https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L53 github.com
- https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L79 github.com
- https://security.snyk.io/vuln/SNYK-JS-AUDIFY-6370700 security.snyk.io
- https://gist.github.com/dellalibera/6bb866ae5d1cc2adaabe27bbd6d2d21e gist.github.com
- https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L53 github.com
- https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L79 github.com
- https://security.snyk.io/vuln/SNYK-JS-AUDIFY-6370700 security.snyk.io