CVE-2012-2108: Stack-based buffer overflow in the main function in util/lpci_main.c in Csound before 5.17.2, when converti...

Security readout for executives and security teams

Csound before 5.17.2 has a stack buffer overflow when converting a crafted file. If someone can convince a user or workflow to process that file, it may lead to arbitrary code execution under the converter's privileges. Exposure is most likely on endpoints, build systems, research workstations, or media-processing workflows that have vulnerable Csound/csound5 installed and convert files from external or semi-trusted sources. Prioritize remediation where Csound processes external files or runs in automated content pipelines. For isolated, trusted-only desktop use, urgency is lower but patching remains appropriate. Mitigation focus: Upgrade Csound to 5.17.2 or a vendor-fixed package.; Apply distribution advisories such as openSUSE updates where relevant.; Avoid converting untrusted files until patched..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.