CVE-2009-0490: Audacityteam Audacity

High severity, CVSS 9.3. EPSS: 16.6% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the String_parse::get_nonspace_quoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a .gro file containing a long string.

Affected products

• Audacityteam Audacity: before 1.3.6 (fixed in 1.3.6)

Published 2009-02-10. Last modified 2026-06-16.