CVE-2026-88372

libsndfile: libsndfile: Denial of Service via integer overflow in mat4_read_header()

View on CVE.org
Published Sep 24, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Libsndfile Project
Libsndfile Project libsndfile
Vendors & Products Libsndfile Project
Libsndfile Project libsndfile
Type Values Removed Values Added
Title libsndfile: libsndfile: Denial of Service via integer overflow in mat4_read_header()
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Weaknesses CWE-190
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
Type Values Removed Values Added
Description libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 24, 2026, 5:58 PM
Reserved
Sep 10, 2026, 12:00 AM

View source JSON

Updated
Sep 24, 2026, 5:58 PM

JSON

Status
Awaiting Analysis
Published
Sep 24, 2026, 5:17 PM
Modified
Sep 24, 2026, 9:04 PM

View source JSON

Severity
Moderate
Public date
Sep 24, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Sep 27, 2026, 11:00 AM

JSON