CVE-2012-6303: Kth Snack Sound Toolkit

Medium severity, CVSS 6.8. EPSS: 10.2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large chunk size in a WAV file.

Affected products

• Kth Snack Sound Toolkit: version 2.2.10 only
• Kth Wavesurfer: version 1.8.8 only
• Opensuse Opensuse: version 13.1 only; version 13.2 only

Published 2013-10-28. Last modified 2026-06-16.