{"id":"CVE-2022-33065","aliases":["ALSA-2024:2184","ALSA-2024:3030","AZL-27647","AZL-34940","CLSA-2025-1745269602","CLSA-2026-1778143751","CLSA-2026-1788170819","CLSA-2026-1792991144","CLSA-2026-1792991364","DEBIAN-CVE-2022-33065","DLA-4287-1","EUVD-2022-36122","GHSA-q72h-h33r-r8j8","MGASA-2023-0310","OESA-2024-2157","RHSA-2024:2184","RHSA-2024:3030","SUSE-SU-2023:4330-1","SUSE-SU-2023:4331-1","UBUNTU-CVE-2022-33065","USN-6471-1","openSUSE-SU-2024:13348-1"],"status":"published","title":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions...","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00364,"percentile":0.30495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2023-07-18T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"libsndfile","fixed_in":["1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libsndfile-devel","fixed_in":["1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libsndfile-utils","fixed_in":["1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libsndfile","fixed_in":["1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libsndfile-devel","fixed_in":["1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libsndfile-utils","fixed_in":["1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libsndfile","fixed_in":["1.0.31-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libsndfile","fixed_in":["1.2.2-2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile","fixed_in":["1.0.31-7.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-devel","fixed_in":["1.0.31-7.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-utils","fixed_in":["1.0.31-7.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsndfile","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsndfile-devel","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsndfile-utils","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsndfile","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsndfile-devel","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsndfile-utils","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsndfile","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsndfile-devel","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsndfile-utils","fixed_in":["1.0.25-12.el7_9.1.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libsndfile","fixed_in":["1.2.0-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libsndfile","fixed_in":["1.2.2-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libsndfile","fixed_in":["1.2.2-2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"libsndfile","fixed_in":["1.0.31-1.3.mga8"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"libsndfile","fixed_in":["1.2.0-3.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"libsndfile","fixed_in":["1.2.2-2.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-debuginfo","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-debugsource","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-utils","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-utils-debuginfo","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-debuginfo","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-debugsource","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-devel","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-utils-debuginfo","fixed_in":["0:1.0.31-8.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-debuginfo","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-debugsource","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-utils","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-utils-debuginfo","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-debuginfo","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-debugsource","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-devel","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-utils-debuginfo","fixed_in":["0:1.0.28-14.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libsndfile-progs","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libsndfile","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"libsndfile-progs","fixed_in":["1.0.28-150000.5.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libsndfile","fixed_in":["1.0.25-36.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libsndfile","fixed_in":["1.0.25-36.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libsndfile","fixed_in":["1.0.25-36.29.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","fixed_in":["1.0.25-7ubuntu2.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsndfile","fixed_in":["1.0.25-10ubuntu0.16.04.3+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsndfile","fixed_in":["1.0.28-4ubuntu0.18.04.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libsndfile","fixed_in":["1.0.28-7ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"libsndfile","fixed_in":["1.0.31-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"libsndfile","fixed_in":["1.2.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-7.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-7.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-7.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsndfile1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsndfile1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"sndfile-programs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-12.el7_9.1.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-1+deb12u1"}]}],"versions":["1.2.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-2+deb11u1"}]}],"versions":["1.0.31-2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-1.3.mga8"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-2.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"libsndfile-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libsndfile-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.31-8.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libsndfile-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libsndfile-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.28-14.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libsndfile-progs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libsndfile-progs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-150000.5.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-36.29.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-7ubuntu2.2+esm3"}]}],"versions":["1.0.25-7ubuntu1","1.0.25-7ubuntu2","1.0.25-7ubuntu2.1","1.0.25-7ubuntu2.2","1.0.25-7ubuntu2.2+esm1","1.0.25-7ubuntu2.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-10ubuntu0.16.04.3+esm3"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1","1.0.25-10ubuntu0.16.04.2","1.0.25-10ubuntu0.16.04.3","1.0.25-10ubuntu0.16.04.3+esm1","1.0.25-10ubuntu0.16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+esm1"}]}],"versions":["1.0.28-4","1.0.28-4ubuntu0.18.04.1","1.0.28-4ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-7ubuntu0.2"}]}],"versions":["1.0.28-6","1.0.28-7","1.0.28-7ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-2ubuntu0.1"}]}],"versions":["1.0.31-2","1.0.31-2build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-7ubuntu2.2+esm3"}]}],"versions":["1.0.25-7ubuntu1","1.0.25-7ubuntu2","1.0.25-7ubuntu2.1","1.0.25-7ubuntu2.2","1.0.25-7ubuntu2.2+esm1","1.0.25-7ubuntu2.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.25-10ubuntu0.16.04.3+esm3"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1","1.0.25-10ubuntu0.16.04.2","1.0.25-10ubuntu0.16.04.3","1.0.25-10ubuntu0.16.04.3+esm1","1.0.25-10ubuntu0.16.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+esm1"}]}],"versions":["1.0.28-4","1.0.28-4ubuntu0.18.04.1","1.0.28-4ubuntu0.18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-7ubuntu0.2"}]}],"versions":["1.0.28-6","1.0.28-7","1.0.28-7ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-2ubuntu0.1"}]}],"versions":["1.0.31-2","1.0.31-2build1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-1.1"}]}]}],"products":[{"vendor":"libsndfile_project","product":"libsndfile"}],"references":[{"url":"https://github.com/libsndfile/libsndfile/issues/833","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://github.com/libsndfile/libsndfile/issues/789","tags":["x_transferred","Issue Tracking","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33065","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-q72h-h33r-r8j8"},{"url":"https://access.redhat.com/errata/RHSA-2024:2184","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-33065","tags":["report"]},{"url":"https://bugzilla.redhat.com/2238934","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2184.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3030","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3030.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1745269602.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1778143751.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788170819.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52194","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792991144.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792991364.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-33065","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0310.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32480","tags":["report"]},{"url":"https://lwn.net/Articles/949598/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2157","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238934","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2184.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-33065","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3030.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234330-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213451","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-33065","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234331-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-33065","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6471-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-33065","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T00:00:00Z","modified":"2024-10-28T18:23:22.077Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-36122","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T00:00:00Z","modified":"2024-10-28T18:23:22Z","updated_at":"2026-11-03T00:05:16.135425Z"}],"ghsa":[{"id":"GHSA-q72h-h33r-r8j8","title":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions...","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T15:30:36Z","modified":"2024-04-04T06:13:27Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:56:40.370348Z"}],"nvd":[{"id":"CVE-2022-33065","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T14:15:12.033Z","modified":"2026-06-17T04:48:25.687Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:38.721429Z"}],"osv":[{"id":"AZL-27647","title":"CVE-2022-33065 affecting package libsndfile for versions less than 1.0.31-3","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T14:15:12Z","modified":"2026-04-21T04:24:28.200427Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-34940","title":"CVE-2022-33065 affecting package libsndfile for versions less than 1.2.2-2","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T14:15:12Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"CVE-2022-33065","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T14:15:12.033Z","modified":"2026-04-16T04:35:07.635128273Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DEBIAN-CVE-2022-33065","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T14:15:12.033Z","modified":"2026-11-03T08:01:23.131595435Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2024-2157","title":"libsndfile security update","description":"Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.\r\n\r\nSecurity Fix(es):\r\n\r\nMultiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.(CVE-2022-33065)","status":"published","published":"2024-09-20T11:07:37Z","modified":"2026-08-18T01:17:32.566783875Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHSA-2024:2184","title":"Red Hat Security Advisory: libsndfile security update","status":"published","published":"2024-09-16T15:42:46Z","modified":"2026-06-26T12:22:38.177131772Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3030","title":"Red Hat Security Advisory: libsndfile security update","status":"published","published":"2024-09-16T15:42:55Z","modified":"2026-06-26T12:22:22.464723005Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2022-33065","description":"Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.","status":"published","published":"2023-07-18T14:15:00Z","modified":"2026-04-22T13:19:42.939442Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2024:2184","title":"Moderate: libsndfile security update","description":"libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. \n\nSecurity Fix(es):\n\n* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:42.952317129Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3030","title":"Moderate: libsndfile security update","description":"libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. \n\nSecurity Fix(es):\n\n* libsndfile: integer overflow in src/mat4.c and src/au.c leads to DoS (CVE-2022-33065)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:20.607445612Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1745269602","title":"libsndfile: Fix of CVE-2022-33065","description":"- CVE-2022-33065: fix int overflow in dataend calculation","status":"published","published":"2025-04-21T21:06:47Z","modified":"2026-06-01T00:30:40.206127449Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"CLSA-2026-1778143751","title":"libsndfile: Fix of CVE-2022-33065","description":"- CVE-2022-33065: fix multiple signed integer overflows in au.c, mat4.c and mat5.c","status":"published","published":"2026-05-08T11:50:06Z","modified":"2026-06-01T00:33:18.825396892Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1788170819","title":"Fix CVE(s): CVE-2021-4156, CVE-2022-33065, CVE-2025-52194","description":"   * SECURITY UPDATE: multiple signed integer overflows in the AU, MAT4/MAT5,\n     AVR, SDS, AIFF, IRCAM, RF64, PCM and IMA-ADPCM header parsers allow\n     denial of service via a crafted file (ELSCVE-171688)\n     - debian/patches/CVE-2022-33065/CVE-2022-33065-{1..8,11..13}.patch:\n       widen the overflowing data_end, blockwidth and sample-count\n       calculations to sf_count_t in src/au.c, src/mat4.c, src/mat5.c,\n       src/avr.c, src/sds.c, src/aiff.c, src/ircam.c, src/common.h,\n       src/common.c, src/pcm.c, src/rf64.c and src/ima_adpcm.c. Byte-identical\n       to Ubuntu's own patches as shipped in the public focal security source\n       1.0.28-7ubuntu0.3 (same upstream 1.0.28, same 13-patch prefix); the\n       bionic +esm1 artifact itself is Ubuntu Pro-gated. Note that Ubuntu's\n       CVE-2022-33065-13.patch is a squash of three upstream commits rather\n       than the single one its header names: 3970faeb (IMA ADPCM nibble\n       sizing) and 7e6cc7cb (stepindx initialisation) are prerequisites that\n       1.0.28 predates, alongside the cited 9f097e49 which carries the\n       CVE-2022-33065 fix proper; all three are credited in that patch's\n       provenance note.\n     - CVE-2022-33065\n   * SECURITY UPDATE: out-of-bounds read in the FLAC decoder when a frame\n     fails to decode and the stale frame pointer is reused (ELSCVE-171682)\n     - debian/patches/CVE-2021-4156.patch: NULL pflac-\u003eframe when\n       FLAC__stream_decoder_process_single() fails in flac_read_loop() in\n       src/flac.c. Byte-identical to Ubuntu's own patch as shipped in the\n       public focal security source 1.0.28-7ubuntu0.3; upstream commit\n       ced91d7b971be6173b604154c39279ce90ad87cc.\n     - CVE-2021-4156\n   * SECURITY UPDATE: undefined float-to-int conversion of the IRCAM header\n     sample rate on out-of-range or non-finite values (ELSCVE-171686)\n     - debian/patches/CVE-2025-52194.patch: convert the file-supplied sample\n       rate with lrintf() instead of a bare (int) cast in ircam_read_header()\n       in src/ircam.c, and include \u003cmath.h\u003e. Backport of upstream commit\n       7ff854d1e0bd9a751a9ff52ed980c62afced91fe, adapted because 1.0.28 has\n       no psf_lrintf() helper; src/mat4.c already uses lrint() for the same\n       purpose in this tree.\n     - CVE-2025-52194","status":"published","published":"2026-08-31T10:07:11Z","modified":"2026-10-26T09:32:04.278067553Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"CLSA-2026-1792991144","title":"libsndfile: Fix of CVE-2022-33065","description":"- Build for rhel7els, cloudlinux7els and oraclelinux7els (CVE-2022-33065)","status":"published","published":"2026-10-26T05:05:55Z","modified":"2026-10-26T09:31:57.305827839Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"CLSA-2026-1792991364","title":"libsndfile: Fix of CVE-2022-33065","description":"- Build for rhel7els, cloudlinux7els and oraclelinux7els (CVE-2022-33065)","status":"published","published":"2026-10-26T05:09:35Z","modified":"2026-10-26T09:32:01.321067953Z","updated_at":"2026-11-02T15:43:54.981307Z"},{"id":"DLA-4287-1","title":"libsndfile - security update","status":"published","published":"2025-08-31T00:00:00Z","modified":"2026-03-09T02:08:32.385646Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2023-0310","title":"Updated libsndfile packages fix a security vulnerability","description":"Add upstream patch to fix CVE-2022-33065\n","status":"published","published":"2023-11-06T23:08:32Z","modified":"2026-04-16T04:40:51.010452516Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13348-1","title":"libsndfile-devel-1.2.2-1.1 on GA media","description":"These are all security issues fixed in the libsndfile-devel-1.2.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:17:26.508775Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"SUSE-SU-2023:4330-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues:\n\n- CVE-2022-33065: Fixed an integer overflow that could cause memory\n  safety issues when reading a MAT4 file (bsc#1213451).\n","status":"published","published":"2023-11-01T05:11:25Z","modified":"2026-02-04T03:46:45.308503Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4331-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues:\n\n- CVE-2022-33065: Fixed an integer overflow that could cause memory\n  safety issues when reading a MAT4 file (bsc#1213451).\n","status":"published","published":"2023-11-01T05:12:38Z","modified":"2026-02-04T02:26:38.879604Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"USN-6471-1","title":"libsndfile vulnerability","description":"It was discovered that libsndfile contained multiple arithmetic overflows.\nIf a user or automated system were tricked into processing a specially\ncrafted audio file, an attacker could possibly use this issue to cause a\ndenial of service.\n","status":"published","published":"2023-11-02T20:36:08Z","modified":"2026-06-29T13:50:59.55982552Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}