CVE-2026-88372
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing...
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
CVE-2026-88372- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2026-86271
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
EUVD-2026-86271- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-49wv-792f-4pr7
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing...
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
GHSA-49wv-792f-4pr7- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
CVE-2026-88372- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-88372
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
DEBIAN-CVE-2026-88372- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-4661
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
- Record
OESA-2026-4661- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-04
Show 7 moreShow less
OSVOESA-2026-4662
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
- Record
OESA-2026-4662- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-04
OSVOESA-2026-4859
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828)
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
- Record
OESA-2026-4859- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-11
OSVOESA-2026-4862
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828)
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
- Record
OESA-2026-4862- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-11
OSVUBUNTU-CVE-2026-88372
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
UBUNTU-CVE-2026-88372- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVAZL-106803No score
CVE-2026-88372 affecting package libsndfile 1.2.2-7
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
- Record
AZL-106803- Updated
- 2026-11-05
OSVopenSUSE-SU-2026:12243-1No score
libsndfile-devel-1.2.2-7.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-7.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12243-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-88372No score
CVE-2026-88372 in libsndfile - Patched by Root
Root has patched CVE-2026-88372 in the libsndfile package for Root:Debian:13. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-13-CVE-2026-88372- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libsndfileAzure Linux:3 | through 1.2.2-7 | None known |
libsndfileDebian:12 | All versions, plus listed versions 1.2.0-11.2.0-1+deb12u11.2.2-11.2.2-1+hurd.11.2.2-1+hurd.2 Show 4 moreShow less1.2.2-1+hurd.31.2.2-21.2.2-31.2.2-4 | None known |
libsndfileDebian:13 | All versions, plus listed versions 1.2.2-21.2.2-2+deb13u11.2.2-31.2.2-4 | None known |
libsndfileDebian:14 | All versions, plus listed versions 1.2.2-21.2.2-31.2.2-4 | None known |
libsndfileopenEuler:24.03-LTS-SP3 | before 1.2.2-8.oe2403sp3 | 1.2.2-8.oe2403sp3 |
libsndfileopenEuler:24.03-LTS-SP1 | before 1.2.2-8.oe2403sp1 | 1.2.2-8.oe2403sp1 |
libsndfileopenEuler:22.03-LTS-SP4 From an advisory covering 2 CVEs | before 1.0.31-8.oe2203sp4 | 1.0.31-8.oe2203sp4 |
libsndfileopenEuler:24.03-LTS-SP4 From an advisory covering 2 CVEs | before 1.2.2-8.oe2403sp4 | 1.2.2-8.oe2403sp4 |
libsndfileRoot:Debian:13 | before 1.2.2-2+deb13u1.aikido.4 | 1.2.2-2+deb13u1.aikido.4 |
rootio-libsndfileRoot:Debian:13 | before 1.2.2-2+deb13u1.aikido.4 | 1.2.2-2+deb13u1.aikido.4 |
Show 9 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libsndfileUbuntu:Pro:14.04:LTS | All versions, plus listed versions 1.0.25-7ubuntu11.0.25-7ubuntu21.0.25-7ubuntu2.11.0.25-7ubuntu2.21.0.25-7ubuntu2.2+esm11.0.25-7ubuntu2.2+esm21.0.25-7ubuntu2.2+esm31.0.25-7ubuntu2.2+esm4 | None known |
libsndfileUbuntu:Pro:16.04:LTS | All versions, plus listed versions 1.0.25-9.11.0.25-101.0.25-10ubuntu0.16.04.11.0.25-10ubuntu0.16.04.21.0.25-10ubuntu0.16.04.3 Show 4 moreShow less1.0.25-10ubuntu0.16.04.3+esm11.0.25-10ubuntu0.16.04.3+esm21.0.25-10ubuntu0.16.04.3+esm31.0.25-10ubuntu0.16.04.3+esm4 | None known |
libsndfileUbuntu:Pro:18.04:LTS | All versions, plus listed versions 1.0.28-41.0.28-4ubuntu0.18.04.11.0.28-4ubuntu0.18.04.21.0.28-4ubuntu0.18.04.2+esm11.0.28-4ubuntu0.18.04.2+esm2 | None known |
libsndfileUbuntu:20.04:LTS | All versions, plus listed versions 1.0.28-61.0.28-71.0.28-7ubuntu0.11.0.28-7ubuntu0.21.0.28-7ubuntu0.3 | None known |
libsndfileUbuntu:22.04:LTS | All versions, plus listed versions 1.0.31-21.0.31-2build11.0.31-2ubuntu0.11.0.31-2ubuntu0.2 | None known |
libsndfileUbuntu:24.04:LTS | All versions, plus listed versions 1.2.2-11.2.2-1ubuntu21.2.2-1ubuntu31.2.2-1ubuntu41.2.2-1ubuntu51.2.2-1ubuntu5.24.04.1 | None known |
libsndfileUbuntu:26.10 | All versions, plus listed versions 1.2.2-4 | None known |
libsndfileUbuntu:26.04:LTS | All versions, plus listed versions 1.2.2-31.2.2-4 | None known |
libsndfileopenSUSE:Tumbleweed | before 1.2.2-7.1 | 1.2.2-7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-88372 is a high vulnerability (CVSS 7.5) in libsndfile, published September 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.39%, the 33rd percentile. Fixed in libsndfile 1.2.2-8.oe2403sp3.
References
github.com/libsndfile/libsndfile/issues/1151
nvd.nist.gov/vuln/detail/CVE-2026-88372
security-tracker.debian.org/tracker/CVE-2026-88372
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4661