CVE-2020-22219: Flac Project Flac

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder.

Affected products

• Flac Project Flac: before 1.4.0 (fixed in 1.4.0)

Published 2023-08-22. Last modified 2026-06-17.