Every CVE Search/ Get API key

CVE-2026-37555

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was...

7.5 HighFix available

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.50%Up 0.5 points since Apr 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
CVE-2026-37555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-190, CWE-190
Updated
2026-11-02
EUVDEUVD-2026-26241 8.2

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
EUVD-2026-26241
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-x46m-7mvp-6fvq 7.5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was...

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
GHSA-x46m-7mvp-6fvq
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 7.5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
CVE-2026-37555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weakness
CWE-190
Updated
2026-11-02
OSV 7.5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
CVE-2026-37555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-37555 7.5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
DEBIAN-CVE-2026-37555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVOESA-2026-2711 7.5

libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.

Security Fix(es):

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.(CVE-2026-37555)

Record
OESA-2026-2711
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2026-2712 7.5

libsndfile security update

Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.

Security Fix(es):

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.(CVE-2026-37555)

Record
OESA-2026-2712
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:19559 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:19559
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:19560 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:19560
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:19610 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:19610
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:23221 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:23221
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:23222 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:23222
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:23223 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:23223
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:25092 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:25092
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:25197 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:25197
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:25198 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:25198
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:25227 8.2

Red Hat Security Advisory: libsndfile security update

Record
RHSA-2026:25227
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:19559 8.2

Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19559
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:19560 8.2

Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19560
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVRLSA-2026:19610 8.2

Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19610
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-37555 8.2

CVE-2026-37555 in libsndfile - Patched by Root

Root has patched CVE-2026-37555 in the libsndfile package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-37555
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-37555 8.2

CVE-2026-37555 in libsndfile - Patched by Root

Root has patched CVE-2026-37555 in the libsndfile package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-37555
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-37555 7.5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
UBUNTU-CVE-2026-37555
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVALSA-2026:19559 No score

Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19559
Updated
2026-11-02
OSVALSA-2026:19560 No score

Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19560
Updated
2026-11-02
OSVALSA-2026:19610 No score

Important: libsndfile security update

libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV.

Security Fix(es):

  • libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19610
Updated
2026-11-02
OSVAZL-85457 No score

CVE-2026-37555 affecting package libsndfile for versions less than 1.2.2-5

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
AZL-85457
Updated
2026-11-05
OSVCLSA-2026-1780515309 No score

libsndfile: Fix of CVE-2026-37555

  • CVE-2026-37555: fix integer overflow in src/ima_adpcm.c when computing sf.frames from samplesperblock * blocks; pre-cast samplesperblock to sf_count_t before the multiplication so a crafted WAV/AIFF audio file cannot trigger a heap buffer overflow (lifted verbatim from upstream libsndfile 0e1d2664 / RH RHEL-174543)
Record
CLSA-2026-1780515309
Updated
2026-11-02
OSVCLSA-2026-1780592196 No score

libsndfile: Fix of CVE-2026-37555

  • CVE-2026-37555: fix int overflow in ima_reader_init in src/ima_adpcm.c
Record
CLSA-2026-1780592196
Updated
2026-11-02
OSVMGASA-2026-0215 No score

Updated libsndfile packages fix security vulnerabilities

CVE-2025-52194 A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution. CVE-2025-56226 Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file. CVE-2026-37555 An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Record
MGASA-2026-0215
Updated
2026-11-02
OSVopenSUSE-SU-2026:10730-1 No score

libsndfile-devel-1.2.2-5.1 on GA media

These are all security issues fixed in the libsndfile-devel-1.2.2-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10730-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20787-1 No score

Security update for libsndfile

This update for libsndfile fixes the following issues

  • CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM audio files (bsc#1248458).
  • CVE-2025-56226: memory leak in the mpeg_l3_encoder_init() function of mpeg_l3_encode.c (bsc#1256702).
  • CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).

Changes for libsndfile:

Record
openSUSE-SU-2026:20787-1
Updated
2026-11-02
OSVSUSE-SU-2026:1968-1 No score

Security update for libsndfile

This update for libsndfile fixes the following issues

  • CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM audio files (bsc#1248458).
  • CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).
Record
SUSE-SU-2026:1968-1
Updated
2026-11-02
OSVSUSE-SU-2026:1969-1 No score

Security update for libsndfile

This update for libsndfile fixes the following issues

  • CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM audio files (bsc#1248458).
  • CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).
Record
SUSE-SU-2026:1969-1
Updated
2026-11-02
OSVSUSE-SU-2026:21826-1 No score

Security update for libsndfile

This update for libsndfile fixes the following issues

  • CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM audio files (bsc#1248458).
  • CVE-2025-56226: memory leak in the mpeg_l3_encoder_init() function of mpeg_l3_encode.c (bsc#1256702).
  • CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).

Changes for libsndfile:

Record
SUSE-SU-2026:21826-1
Updated
2026-11-02

Affected products

Show 5 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libsndfile
AlmaLinux:8
 before 1.0.28-17.el8_10
1.0.28-17.el8_10
libsndfile-devel
AlmaLinux:8
 before 1.0.28-17.el8_10
1.0.28-17.el8_10
libsndfile-utils
AlmaLinux:8
 before 1.0.28-17.el8_10
1.0.28-17.el8_10
libsndfile
AlmaLinux:10
 before 1.2.2-6.el10_2.1
1.2.2-6.el10_2.1
libsndfile-devel
AlmaLinux:10
 before 1.2.2-6.el10_2.1
1.2.2-6.el10_2.1
libsndfile-utils
AlmaLinux:10
 before 1.2.2-6.el10_2.1
1.2.2-6.el10_2.1
libsndfile
AlmaLinux:9
 before 1.0.31-9.el9_8.1
1.0.31-9.el9_8.1
libsndfile-devel
AlmaLinux:9
 before 1.0.31-9.el9_8.1
1.0.31-9.el9_8.1
libsndfile-utils
AlmaLinux:9
 before 1.0.31-9.el9_8.1
1.0.31-9.el9_8.1
libsndfile
Azure Linux:3
 before 1.2.2-5
1.2.2-5
Show 104 moreShow less
Affected packages
PackageAffectedFixed
libsndfile
TuxCare:AlmaLinux:9.6
 before 1.0.31-9.el9_6.tuxcare.els1
1.0.31-9.el9_6.tuxcare.els1
libsndfile-devel
TuxCare:AlmaLinux:9.6
 before 1.0.31-9.el9_6.tuxcare.els1
1.0.31-9.el9_6.tuxcare.els1
libsndfile-utils
TuxCare:AlmaLinux:9.6
 before 1.0.31-9.el9_6.tuxcare.els1
1.0.31-9.el9_6.tuxcare.els1
libsndfile
TuxCare:AlmaLinux:9.2
 before 1.0.31-7.el9_2.tuxcare.els3
1.0.31-7.el9_2.tuxcare.els3
libsndfile-devel
TuxCare:AlmaLinux:9.2
 before 1.0.31-7.el9_2.tuxcare.els3
1.0.31-7.el9_2.tuxcare.els3
libsndfile-utils
TuxCare:AlmaLinux:9.2
 before 1.0.31-7.el9_2.tuxcare.els3
1.0.31-7.el9_2.tuxcare.els3
libsndfile
Debian:12
 All versions, plus listed versions
1.2.0-11.2.0-1+deb12u11.2.2-11.2.2-1+hurd.11.2.2-1+hurd.2
Show 4 moreShow less
1.2.2-1+hurd.31.2.2-21.2.2-31.2.2-4
 None known
libsndfile
Debian:13
 All versions, plus listed versions
1.2.2-21.2.2-2+deb13u11.2.2-31.2.2-4
 None known
libsndfile
Debian:14
 All versions, plus listed versions
1.2.2-21.2.2-31.2.2-4
 None known
libsndfile
Mageia:9
From an advisory covering 3 CVEs
 before 1.2.0-3.3.mga9
1.2.0-3.3.mga9
libsndfile
openEuler:24.03-LTS-SP1
 before 1.2.2-5.oe2403sp1
1.2.2-5.oe2403sp1
libsndfile
openEuler:24.03-LTS-SP3
 before 1.2.2-5.oe2403sp3
1.2.2-5.oe2403sp3
libsndfile
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-utils
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-devel
Red Hat:enterprise_linux:8::crb
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile-utils-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile
Red Hat:enterprise_linux:10.2
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile-debugsource
Red Hat:enterprise_linux:10.2
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile-utils
Red Hat:enterprise_linux:10.2
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile-utils-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile-devel
Red Hat:enterprise_linux:10.2
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile
Red Hat:enterprise_linux:9::appstream
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-utils
Red Hat:enterprise_linux:9::appstream
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-debugsource
Red Hat:enterprise_linux:9::crb
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-devel
Red Hat:enterprise_linux:9::crb
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile-utils-debuginfo
Red Hat:enterprise_linux:9::crb
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.0.31-7.el9_2.1
0:1.0.31-7.el9_2.1
libsndfile-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.0.31-7.el9_2.1
0:1.0.31-7.el9_2.1
libsndfile-debugsource
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.0.31-7.el9_2.1
0:1.0.31-7.el9_2.1
libsndfile-utils
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.0.31-7.el9_2.1
0:1.0.31-7.el9_2.1
libsndfile-utils-debuginfo
Red Hat:rhel_e4s:9.2::appstream
 before 0:1.0.31-7.el9_2.1
0:1.0.31-7.el9_2.1
libsndfile
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.0.31-8.el9_4.2
0:1.0.31-8.el9_4.2
libsndfile-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.0.31-8.el9_4.2
0:1.0.31-8.el9_4.2
libsndfile-debugsource
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.0.31-8.el9_4.2
0:1.0.31-8.el9_4.2
libsndfile-utils
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.0.31-8.el9_4.2
0:1.0.31-8.el9_4.2
libsndfile-utils-debuginfo
Red Hat:rhel_e4s:9.4::appstream
 before 0:1.0.31-8.el9_4.2
0:1.0.31-8.el9_4.2
libsndfile
Red Hat:rhel_eus:9.6::appstream
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-debugsource
Red Hat:rhel_eus:9.6::appstream
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-utils
Red Hat:rhel_eus:9.6::appstream
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-utils-debuginfo
Red Hat:rhel_eus:9.6::appstream
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-debugsource
Red Hat:rhel_eus:9.6::crb
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-devel
Red Hat:rhel_eus:9.6::crb
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile-utils-debuginfo
Red Hat:rhel_eus:9.6::crb
 before 0:1.0.31-9.el9_6.1
0:1.0.31-9.el9_6.1
libsndfile
Red Hat:enterprise_linux_eus:10.0
 before 0:1.2.2-5.el10_0.1
0:1.2.2-5.el10_0.1
libsndfile-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:1.2.2-5.el10_0.1
0:1.2.2-5.el10_0.1
libsndfile-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:1.2.2-5.el10_0.1
0:1.2.2-5.el10_0.1
libsndfile-utils
Red Hat:enterprise_linux_eus:10.0
 before 0:1.2.2-5.el10_0.1
0:1.2.2-5.el10_0.1
libsndfile-utils-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:1.2.2-5.el10_0.1
0:1.2.2-5.el10_0.1
libsndfile-devel
Red Hat:enterprise_linux_eus:10.0
 before 0:1.2.2-5.el10_0.1
0:1.2.2-5.el10_0.1
libsndfile
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile-debugsource
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile-utils-debuginfo
Red Hat:rhel_aus:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile-debugsource
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile-utils-debuginfo
Red Hat:rhel_eus_long_life:8.4::appstream
 before 0:1.0.28-10.el8_4.2
0:1.0.28-10.el8_4.2
libsndfile
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile-debugsource
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile-utils-debuginfo
Red Hat:rhel_aus:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile
Red Hat:rhel_eus_long_life:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile-debuginfo
Red Hat:rhel_eus_long_life:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile-debugsource
Red Hat:rhel_eus_long_life:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile-utils-debuginfo
Red Hat:rhel_eus_long_life:8.6::appstream
 before 0:1.0.28-13.el8_6
0:1.0.28-13.el8_6
libsndfile
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-debugsource
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-utils
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-utils-debuginfo
Red Hat:rhel_e4s:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-debugsource
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-utils
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile-utils-debuginfo
Red Hat:rhel_tus:8.8::appstream
 before 0:1.0.28-14.el8_8
0:1.0.28-14.el8_8
libsndfile
Rocky Linux:8
 before 0:1.0.28-17.el8_10
0:1.0.28-17.el8_10
libsndfile
Rocky Linux:10
 before 0:1.2.2-6.el10_2.1
0:1.2.2-6.el10_2.1
libsndfile
Rocky Linux:9
 before 0:1.0.31-9.el9_8.1
0:1.0.31-9.el9_8.1
libsndfile
Root:Debian:12
 before 1.2.0-1+deb12u1.aikido.6
1.2.0-1+deb12u1.aikido.6
rootio-libsndfile
Root:Debian:12
 before 1.2.0-1+deb12u1.aikido.6
1.2.0-1+deb12u1.aikido.6
libsndfile
Root:Debian:13
 before 1.2.2-2+deb13u1.aikido.3
1.2.2-2+deb13u1.aikido.31.2.2-2+deb13u1.aikido.21.2.2-2+deb13u1.root.io.11.2.2-2+deb13u1.aikido.4
rootio-libsndfile
Root:Debian:13
 before 1.2.2-2+deb13u1.aikido.3
1.2.2-2+deb13u1.aikido.31.2.2-2+deb13u1.aikido.21.2.2-2+deb13u1.root.io.11.2.2-2+deb13u1.aikido.4
libsndfile
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.0.25-7ubuntu11.0.25-7ubuntu21.0.25-7ubuntu2.11.0.25-7ubuntu2.21.0.25-7ubuntu2.2+esm11.0.25-7ubuntu2.2+esm21.0.25-7ubuntu2.2+esm31.0.25-7ubuntu2.2+esm4
 None known
libsndfile
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1.0.25-9.11.0.25-101.0.25-10ubuntu0.16.04.11.0.25-10ubuntu0.16.04.21.0.25-10ubuntu0.16.04.3
Show 4 moreShow less
1.0.25-10ubuntu0.16.04.3+esm11.0.25-10ubuntu0.16.04.3+esm21.0.25-10ubuntu0.16.04.3+esm31.0.25-10ubuntu0.16.04.3+esm4
 None known
libsndfile
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1.0.28-41.0.28-4ubuntu0.18.04.11.0.28-4ubuntu0.18.04.21.0.28-4ubuntu0.18.04.2+esm11.0.28-4ubuntu0.18.04.2+esm2
 None known
libsndfile
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.28-61.0.28-71.0.28-7ubuntu0.11.0.28-7ubuntu0.21.0.28-7ubuntu0.3
 None known
libsndfile
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.0.31-21.0.31-2build11.0.31-2ubuntu0.11.0.31-2ubuntu0.2
 None known
libsndfile
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.2.2-11.2.2-1ubuntu21.2.2-1ubuntu31.2.2-1ubuntu41.2.2-1ubuntu51.2.2-1ubuntu5.24.04.1
 None known
libsndfile
Ubuntu:25.10
 All versions, plus listed versions
1.2.2-2build11.2.2-3
 None known
libsndfile
Ubuntu:26.10
 All versions, plus listed versions
1.2.2-4
 None known
libsndfile
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.2.2-31.2.2-4
 None known
libsndfile
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.2.2-5.1
1.2.2-5.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-37555 is a high vulnerability (CVSS 7.5) in Libsndfile Project Libsndfile, published April 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 43rd percentile. Fixed in libsndfile 1.0.28-17.el8_10.

References

Show 54 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open