CVE-2026-88386
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing...
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
CVE-2026-88386- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2026-86472
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
EUVD-2026-86472- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x44m-83p2-j4h6
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing...
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
GHSA-x44m-83p2-j4h6- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
NVD
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
CVE-2026-88386- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-122
- Updated
- 2026-11-02
OSV
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
CVE-2026-88386- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-88386
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
DEBIAN-CVE-2026-88386- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVOESA-2026-4561
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.(CVE-2026-88386)
- Record
OESA-2026-4561- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-4562
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.(CVE-2026-88386)
- Record
OESA-2026-4562- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-4563
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.(CVE-2026-88386)
- Record
OESA-2026-4563- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-4564
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.(CVE-2026-88386)
- Record
OESA-2026-4564- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-88386
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
UBUNTU-CVE-2026-88386- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-106800 No score
CVE-2026-88386 affecting package libsndfile 1.2.2-5
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
- Record
AZL-106800- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12142-1 No score
libsndfile-devel-1.2.2-6.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-6.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12142-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libsndfileAzure Linux:3 |
through 1.2.2-5 | None known |
libsndfileDebian:12 |
All versions, plus listed versions 1.2.0-11.2.0-1+deb12u11.2.2-11.2.2-1+hurd.11.2.2-1+hurd.2 Show 4 moreShow less1.2.2-1+hurd.31.2.2-21.2.2-31.2.2-4 |
None known |
libsndfileDebian:13 |
All versions, plus listed versions 1.2.2-21.2.2-2+deb13u11.2.2-31.2.2-4 |
None known |
libsndfileDebian:14 |
All versions, plus listed versions 1.2.2-21.2.2-31.2.2-4 |
None known |
libsndfileopenEuler:24.03-LTS-SP1 |
before 1.2.2-7.oe2403sp1 | 1.2.2-7.oe2403sp1 |
libsndfileopenEuler:24.03-LTS-SP3 |
before 1.2.2-7.oe2403sp3 | 1.2.2-7.oe2403sp3 |
libsndfileopenEuler:24.03-LTS-SP4 |
before 1.2.2-7.oe2403sp4 | 1.2.2-7.oe2403sp4 |
libsndfileopenEuler:22.03-LTS-SP4 |
before 1.0.31-7.oe2203sp4 | 1.0.31-7.oe2203sp4 |
libsndfileUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.0.25-7ubuntu11.0.25-7ubuntu21.0.25-7ubuntu2.11.0.25-7ubuntu2.21.0.25-7ubuntu2.2+esm11.0.25-7ubuntu2.2+esm21.0.25-7ubuntu2.2+esm31.0.25-7ubuntu2.2+esm4 |
None known |
libsndfileUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.0.25-9.11.0.25-101.0.25-10ubuntu0.16.04.11.0.25-10ubuntu0.16.04.21.0.25-10ubuntu0.16.04.3 Show 4 moreShow less1.0.25-10ubuntu0.16.04.3+esm11.0.25-10ubuntu0.16.04.3+esm21.0.25-10ubuntu0.16.04.3+esm31.0.25-10ubuntu0.16.04.3+esm4 |
None known |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libsndfileUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.0.28-41.0.28-4ubuntu0.18.04.11.0.28-4ubuntu0.18.04.21.0.28-4ubuntu0.18.04.2+esm11.0.28-4ubuntu0.18.04.2+esm2 |
None known |
libsndfileUbuntu:20.04:LTS |
All versions, plus listed versions 1.0.28-61.0.28-71.0.28-7ubuntu0.11.0.28-7ubuntu0.21.0.28-7ubuntu0.3 |
None known |
libsndfileUbuntu:22.04:LTS |
All versions, plus listed versions 1.0.31-21.0.31-2build11.0.31-2ubuntu0.11.0.31-2ubuntu0.2 |
None known |
libsndfileUbuntu:24.04:LTS |
All versions, plus listed versions 1.2.2-11.2.2-1ubuntu21.2.2-1ubuntu31.2.2-1ubuntu41.2.2-1ubuntu51.2.2-1ubuntu5.24.04.1 |
None known |
libsndfileUbuntu:26.10 |
All versions, plus listed versions 1.2.2-4 |
None known |
libsndfileUbuntu:26.04:LTS |
All versions, plus listed versions 1.2.2-31.2.2-4 |
None known |
libsndfileopenSUSE:Tumbleweed |
before 1.2.2-6.1 | 1.2.2-6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-88386 is a medium vulnerability (CVSS 5.5) in libsndfile, published September 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 4th percentile. Fixed in libsndfile 1.2.2-7.oe2403sp1.
References
github.com/libsndfile/libsndfile/issues/1150
nvd.nist.gov/vuln/detail/CVE-2026-88386
security-tracker.debian.org/tracker/CVE-2026-88386
Show 7 moreShow less
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4561
ubuntu.com/security/CVE-2026-88386
cve.org/CVERecord?id=CVE-2026-88386
suse.com/security/cve/CVE-2026-88386