CVE-2007-4619

no score yetEPSS 6.7%

No CVSS score yet. EPSS 6.7% chance of exploitation in the next 30 days.

Multiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in Winamp before 5.5 and other products, allow user-assisted remote attackers to execute arbitrary code via a malformed FLAC file that triggers improper memory allocation, resulting in a heap-based buffer overflow.

EPSS: 6.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-189
Published: 2007-10-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

flac:libflac
nullsoft:winamp

References

http://bugzilla.redhat.com/show_bug.cgi?id=331991
http://flac.sourceforge.net/changelog.html#flac_1_2_1
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=608
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00008.html
http://secunia.com/advisories/27210

Check your stack JSON