Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 34

Export CSV
CVE-2026-88372

libsndfile: libsndfile: Denial of Service via integer overflow in mat4_read_header()

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2026-88386

libsndfile: libsndfile: Denial of Service via misaligned memory access during WAV parsing

libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2026-37555

libsndfile: integer overflow in ima_reader_init()

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2025-56226

libsndfile: memory leak when encoding MP3 files due to an incomplete initialization

Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2021-4156

libsndfile: heap out-of-bounds read in src/flac.c in flac_buffer_copy

An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is able to submit a specially crafted file (via tricking a user to open or otherwise) to an application linked with libsndfile and using the FLAC codec, could trigger an out-of-bounds read that would most likely cause a crash but could potentially leak memory information that could be used in further exploitation of other flaws.

CVSS 3.1 · 7.1 High EPSS 1.8% KEV · Not listed
Vendors
Debian Libsndfile Project Redhat
Products
Debian Linux Libsndfile Enterprise Linux
CVE-2025-52194

libsndfile: buffer overflow when processing crafted IRCAM audio files

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-8361

libsndfile: Buffer overflow in the flac_buffer_copy function

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-8362

libsndfile: Out-of-bounds read in the flac_buffer_copy function

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.

CVSS 3.0 · 6.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-8363

libsndfile: Heap buffer over-read in the flac_buffer_copy function

The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.

CVSS 3.0 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-8365

libsndfile: Buffer over-read in the l2les_array function

The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.

CVSS 3.0 · 6.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-7585

libsndfile: Stack-based buffer overflow in flac_buffer_copy()

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-7586

libsndfile: Error in header_read() causing stack-based buffer overflow

In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.

CVSS 3.0 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-7741

libsndfile: Invalid memory write in flac_buffer_copy function

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-7742

libsndfile: Invalid memory read in flac_buffer_copy function

In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-6892

libsndfile: Information disclosure via aiff_read_chanmap() function

In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.

CVSS 3.0 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-16942

libsndfile: divide-by-zero error in wav_w64_read_fmt_chunk()

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Libsndfile Project
Products
Libsndfile
CVE-2017-14634

libsndfile: Divide-by-zero in the double64_init() function

In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-14245

libsndfile: Out-of-bounds read in the function d2alaw_array()

An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

CVSS 3.0 · 8.1 High EPSS 2.0% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-14246

libsndfile: Out-of-bounds read in the function d2ulaw_array()

An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.

CVSS 3.0 · 8.1 High EPSS 2.2% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile
CVE-2017-12562

libsndfile: Heap-based Buffer Overflow in psf_binheader_writef function in common.c

Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

CVSS 3.1 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Debian Libsndfile Project
Products
Debian Linux Libsndfile