Browse CVEs

HIGH 7.5 CVE-2026-37555 An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (l… Libsndfile Patch available Fix from $1,9502026-04-29 MEDIUM 5.3 CVE-2025-56226 Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file. Libsndfile after 1.2.2 Fix from $1,6002026-01-14 HIGH 7.5 CVE-2025-52194 A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The … Libsndfile after 1.2.2 Fix from $1,9502025-08-21 MEDIUM 6.5 CVE-2024-50613 libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close. Libsndfile after 1.2.2 Fix from $1,6002024-10-27 MEDIUM 5.5 CVE-2024-50612 libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. Libsndfile after 1.2.2 Fix from $1,6002024-10-27 HIGH 7.8 CVE-2022-33065 Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile,… Libsndfile No fix yet Fix from $1,9502023-07-18 HIGH 7.8 CVE-2022-33064 An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execut… Libsndfile Patch available Fix from $1,9502023-07-18 MEDIUM 6.5 CVE-2018-13419 An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maint… Libsndfile Mitigation only Fix from $1,6002018-07-07 MEDIUM 6.5 CVE-2017-16942 In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS wh… Libsndfile Mitigation only Fix from $1,6002017-11-25 HIGH 8.8 CVE-2017-6892 In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access v… Libsndfile Patch available Fix from $1,9502017-06-12 MEDIUM 5.5 CVE-2017-7741 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write me… Libsndfile after 1.0.27 Fix from $1,6002017-04-12 MEDIUM 5.5 CVE-2017-7742 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read mem… Libsndfile after 1.0.27 Fix from $1,6002017-04-12 MEDIUM 5.5 CVE-2017-7585 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a spe… Libsndfile after 1.0.27 Fix from $1,6002017-04-07 MEDIUM 5.5 CVE-2017-7586 In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffe… Libsndfile after 1.0.27 Fix from $1,6002017-04-07