In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.
Weakness
The product divides a value by zero.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libsndfile | Libsndfile_project | 1.0.25 (including) | 1.0.25 (including) |
| Libsndfile | Ubuntu | esm-infra-legacy/trusty | * |
| Libsndfile | Ubuntu | esm-infra/xenial | * |
| Libsndfile | Ubuntu | trusty | * |
| Libsndfile | Ubuntu | trusty/esm | * |
| Libsndfile | Ubuntu | upstream | * |
| Libsndfile | Ubuntu | xenial | * |
| Libsndfile | Ubuntu | zesty | * |