PT-2025-43528 · Audiofile+1 · Audiofile+1

Published 2025-10-23 · Updated 2026-03-27 · CVE-2025-50950

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Audiofile version 0.3.7

Description The software contains a NULL pointer dereference within the ModuleState::setup function. This can lead to unexpected behavior or a denial of service.

Recommendations Update to a newer version that contains a fix for this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-68814

AZL-68885

CVE-2025-50950

OESA-2026-1782

OESA-2026-1783

OESA-2026-1784

OESA-2026-1785

OESA-2026-1786

RHSA-2025:23457

Affected Products

Audiofile

Debian

References · 25

• https://github.com/mpruett/audiofile/issues/66 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-13147 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1786 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-68885 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-50950 · Security Note
• https://osv.dev/vulnerability/AZL-68814 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-50950 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50950 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1783 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-50950 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1785 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-50950 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-23457.html · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1782 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1784 · Vendor Advisory