bchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow (with a resultant invalid free) and crash when processing a malformed CUE (.cue) file.
| Software | From | Fixed in |
|---|---|---|
| debian / debian_linux | 8.0 | 8.0.x |
| bchunk_project / bchunk | 1.2.1 | 1.2.1.x |
| bchunk_project / bchunk | 1.2.0 | 1.2.0.x |