CVE-2026-109828
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
CVE-2026-109828- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C - CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C - CVSS 2.0
- 5.0
AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C - Weakness
- CWE-457, CWE-453
- Updated
- 2026-11-02
EUVDEUVD-2026-98900
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
EUVD-2026-98900- CVSS 4.0
- 5.3 Medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-f48f-2357-x2fh
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function...
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
GHSA-f48f-2357-x2fh- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Weakness
- CWE-453
- Updated
- 2026-11-02
NVD
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
CVE-2026-109828- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-453, CWE-457
- Updated
- 2026-11-02
OSVBELL-CVE-2026-109828
- Record
BELL-CVE-2026-109828- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSV
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
CVE-2026-109828- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P - Weakness
- CWE-453, CWE-457
- Updated
- 2026-11-09
Show 8 moreShow less
OSVDEBIAN-CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
DEBIAN-CVE-2026-109828- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Updated
- 2026-11-02
OSVOESA-2026-4859
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828)
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
- Record
OESA-2026-4859- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-11
OSVOESA-2026-4860
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828)
- Record
OESA-2026-4860- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-11
OSVOESA-2026-4861
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828)
- Record
OESA-2026-4861- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-11
OSVOESA-2026-4862
libsndfile security update
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828)
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
- Record
OESA-2026-4862- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-11
OSVUBUNTU-CVE-2026-109828
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
UBUNTU-CVE-2026-109828- CVSS 4.0
- 2.1 Low
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P - CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVAZL-108036No score
CVE-2026-109828 affecting package libsndfile 1.2.2-7
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
- Record
AZL-108036- Updated
- 2026-11-05
OSVopenSUSE-SU-2026:12486-1No score
libsndfile-devel-1.2.2-8.1 on GA media
These are all security issues fixed in the libsndfile-devel-1.2.2-8.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12486-1- Updated
- 2026-11-09
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libsndfileAzure Linux:3 | through 1.2.2-7 | None known |
libsndfileAlpaquita:23 | 1.1.0-r2 and later | None known |
libsndfileAlpaquita:25 | 1.2.2-r1 and later | None known |
libsndfileAlpaquita:stream | 1.2.0-r1 and later | None known |
libsndfileDebian:12 | All versions, plus listed versions 1.2.0-11.2.0-1+deb12u11.2.2-11.2.2-1+hurd.11.2.2-1+hurd.2 Show 4 moreShow less1.2.2-1+hurd.31.2.2-21.2.2-31.2.2-4 | None known |
libsndfileDebian:13 | All versions, plus listed versions 1.2.2-21.2.2-2+deb13u11.2.2-31.2.2-4 | None known |
libsndfileDebian:14 | All versions, plus listed versions 1.2.2-21.2.2-31.2.2-4 | None known |
libsndfileopenEuler:22.03-LTS-SP4 From an advisory covering 2 CVEs | before 1.0.31-8.oe2203sp4 | 1.0.31-8.oe2203sp4 |
libsndfileopenEuler:24.03-LTS-SP1 | before 1.2.2-8.oe2403sp1 | 1.2.2-8.oe2403sp1 |
libsndfileopenEuler:24.03-LTS-SP3 | before 1.2.2-8.oe2403sp3 | 1.2.2-8.oe2403sp3 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libsndfileopenEuler:24.03-LTS-SP4 From an advisory covering 2 CVEs | before 1.2.2-8.oe2403sp4 | 1.2.2-8.oe2403sp4 |
libsndfileUbuntu:Pro:14.04:LTS | All versions, plus listed versions 1.0.25-7ubuntu11.0.25-7ubuntu21.0.25-7ubuntu2.11.0.25-7ubuntu2.21.0.25-7ubuntu2.2+esm11.0.25-7ubuntu2.2+esm21.0.25-7ubuntu2.2+esm31.0.25-7ubuntu2.2+esm4 | None known |
libsndfileUbuntu:Pro:16.04:LTS | All versions, plus listed versions 1.0.25-9.11.0.25-101.0.25-10ubuntu0.16.04.11.0.25-10ubuntu0.16.04.21.0.25-10ubuntu0.16.04.3 Show 4 moreShow less1.0.25-10ubuntu0.16.04.3+esm11.0.25-10ubuntu0.16.04.3+esm21.0.25-10ubuntu0.16.04.3+esm31.0.25-10ubuntu0.16.04.3+esm4 | None known |
libsndfileUbuntu:Pro:18.04:LTS | All versions, plus listed versions 1.0.28-41.0.28-4ubuntu0.18.04.11.0.28-4ubuntu0.18.04.21.0.28-4ubuntu0.18.04.2+esm11.0.28-4ubuntu0.18.04.2+esm2 | None known |
libsndfileUbuntu:20.04:LTS | All versions, plus listed versions 1.0.28-61.0.28-71.0.28-7ubuntu0.11.0.28-7ubuntu0.21.0.28-7ubuntu0.3 | None known |
libsndfileUbuntu:22.04:LTS | All versions, plus listed versions 1.0.31-21.0.31-2build11.0.31-2ubuntu0.11.0.31-2ubuntu0.2 | None known |
libsndfileUbuntu:24.04:LTS | All versions, plus listed versions 1.2.2-11.2.2-1ubuntu21.2.2-1ubuntu31.2.2-1ubuntu41.2.2-1ubuntu51.2.2-1ubuntu5.24.04.1 | None known |
libsndfileUbuntu:26.10 | All versions, plus listed versions 1.2.2-4 | None known |
libsndfileUbuntu:26.04:LTS | All versions, plus listed versions 1.2.2-31.2.2-4 | None known |
libsndfileopenSUSE:Tumbleweed | before 1.2.2-8.1 | 1.2.2-8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-109828 is a medium vulnerability (CVSS 5.3) in libsndfile, published October 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 22nd percentile. Fixed in libsndfile 1.2.2-8.oe2403sp1.
References
vuldb.com/vuln/417466
github.com/libsndfile/libsndfile/issues/1169
Show 13 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-109828
docs.bell-sw.com/security/cves/CVE-2026-109828
security-tracker.debian.org/tracker/CVE-2026-109828
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4859
ubuntu.com/security/CVE-2026-109828
cve.org/CVERecord?id=CVE-2026-109828
suse.com/security/cve/CVE-2026-109828