CVE-2018-13440: Audiofile

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.

Affected products

• Audiofile Audiofile: version 0.3.6 only
• Canonical Ubuntu Linux: version 14.04 only

Published 2018-07-08. Last modified 2026-06-17.