CVE-2024-21522
1 advisory.
npm/audify CVE-2024-21522: high 7.5, EPSS 0.62%
audify vulnerable to Improper Validation of Array Index
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.9.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7vhm-fmph-7wxw
- https://nvd.nist.gov/vuln/detail/CVE-2024-21522
- https://gist.github.com/dellalibera/6bb866ae5d1cc2adaabe27bbd6d2d21e
- https://github.com/almoghamdani/audify
- https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp#L53
- https://github.com/almoghamdani/audify/blob/94b2fe79dc528fda2c7d59c7a0fd0e9de07dc3dc/src/opus_decoder.cpp%23L79
- https://security.snyk.io/vuln/SNYK-JS-AUDIFY-6370700
CVE-2024-21522 · published · modified · JSON