{"url":"http://public2.vulnerablecode.io/api/packages/56307?format=json","purl":"pkg:deb/debian/libsndfile@1.0.21-3?distro=trixie","type":"deb","namespace":"debian","name":"libsndfile","version":"1.0.21-3","qualifiers":{"distro":"trixie"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"1.0.25-1","latest_non_vulnerable_version":"1.2.2-4","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/201633?format=json","vulnerability_id":"VCID-y7us-y2nb-qbge","summary":"The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file.","references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2009-4835","reference_id":"","reference_type":"","scores":[{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.593","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.5941","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00371","scoring_system":"epss","scoring_elements":"0.59422","published_at":"2026-06-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2009-4835"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4835","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4835"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530831","reference_id":"530831","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=530831"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/56307?format=json","purl":"pkg:deb/debian/libsndfile@1.0.21-3?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libsndfile@1.0.21-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/56302?format=json","purl":"pkg:deb/debian/libsndfile@1.0.31-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libsndfile@1.0.31-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/56300?format=json","purl":"pkg:deb/debian/libsndfile@1.2.0-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-8hud-r6g5-5bhj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libsndfile@1.2.0-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/56304?format=json","purl":"pkg:deb/debian/libsndfile@1.2.2-2%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libsndfile@1.2.2-2%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/56303?format=json","purl":"pkg:deb/debian/libsndfile@1.2.2-4?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libsndfile@1.2.2-4%3Fdistro=trixie"}],"aliases":["CVE-2009-4835"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-y7us-y2nb-qbge"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/libsndfile@1.0.21-3%3Fdistro=trixie"}