{"id":"CVE-2025-52194","aliases":["AZL-66669","AZL-66671","CLSA-2026-1786483996","CLSA-2026-1786490187","CLSA-2026-1788170819","DEBIAN-CVE-2025-52194","EUVD-2025-25491","GHSA-3w6g-vv96-4ph6","MGASA-2026-0215","SUSE-SU-2026:1968-1","SUSE-SU-2026:1969-1","SUSE-SU-2026:21826-1","UBUNTU-CVE-2025-52194","openSUSE-SU-2026:10730-1","openSUSE-SU-2026:20787-1"],"status":"published","title":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier...","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00704,"percentile":0.53813,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121"],"published":"2025-08-21T00:00:00Z","modified":"2026-11-07T14:19:43Z","fixes":[{"ecosystem":"Azure Linux:3","package":"libsndfile","fixed_in":["1.2.2-7"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile","fixed_in":["1.0.31-7.el9_2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-devel","fixed_in":["1.0.31-7.el9_2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-utils","fixed_in":["1.0.31-7.el9_2.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsndfile","fixed_in":["1.0.31-9.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsndfile-devel","fixed_in":["1.0.31-9.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsndfile-utils","fixed_in":["1.0.31-9.el9_6.tuxcare.els2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.31-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-7"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-7.el9_2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-7.el9_2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-7.el9_2.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-9.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsndfile-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-9.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"libsndfile-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.31-9.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsndfile1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsndfile1-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"sndfile-programs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.28-4ubuntu0.18.04.2+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:9","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.0-3.3.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.25-7ubuntu1","1.0.25-7ubuntu2","1.0.25-7ubuntu2.1","1.0.25-7ubuntu2.2","1.0.25-7ubuntu2.2+esm1","1.0.25-7ubuntu2.2+esm2","1.0.25-7ubuntu2.2+esm3","1.0.25-7ubuntu2.2+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.25-9.1","1.0.25-10","1.0.25-10ubuntu0.16.04.1","1.0.25-10ubuntu0.16.04.2","1.0.25-10ubuntu0.16.04.3","1.0.25-10ubuntu0.16.04.3+esm1","1.0.25-10ubuntu0.16.04.3+esm2","1.0.25-10ubuntu0.16.04.3+esm3","1.0.25-10ubuntu0.16.04.3+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.28-4","1.0.28-4ubuntu0.18.04.1","1.0.28-4ubuntu0.18.04.2","1.0.28-4ubuntu0.18.04.2+esm1","1.0.28-4ubuntu0.18.04.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.28-6","1.0.28-7","1.0.28-7ubuntu0.1","1.0.28-7ubuntu0.2","1.0.28-7ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.31-2","1.0.31-2build1","1.0.31-2ubuntu0.1","1.0.31-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-1","1.2.2-1ubuntu2","1.2.2-1ubuntu3","1.2.2-1ubuntu4","1.2.2-1ubuntu5","1.2.2-1ubuntu5.24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-2build1","1.2.2-3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-3","1.2.2-4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libsndfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-5.1"}]}],"bundled":2}],"products":[{"vendor":"libsndfile_project","product":"libsndfile"}],"references":[{"url":"https://github.com/libsndfile/libsndfile/issues/1082","tags":["Exploit","Issue Tracking","Patch","Vendor Advisory","report"]},{"url":"https://github.com/libsndfile","tags":["Product","web"]},{"url":"https://bushido-sec.com/index.php/2025/08/08/libsndfile-buffer-overflow/","tags":["Broken Link","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52194","tags":["web","advisory"]},{"url":"https://bushido-sec.com/index.php/2025/08/08/libsndfile-buffer-overflow"},{"url":"https://github.com/advisories/GHSA-3w6g-vv96-4ph6"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786483996.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1786490187.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788170819.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4156","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33065","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/52xxx/CVE-2025-52194.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-52194","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0215.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35451","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261968-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248458","tags":["report"]},{"url":"https://bugzilla.suse.com/1263695","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-52194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-37555","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261969-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621826-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1256702","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-56226","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-52194","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-52194","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-52194","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T00:00:00Z","modified":"2025-08-21T19:56:46.362Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:32:31.309974Z"}],"euvd":[{"id":"EUVD-2025-25491","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T00:00:00Z","modified":"2025-08-21T19:56:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:31:54.537077Z"}],"ghsa":[{"id":"GHSA-3w6g-vv96-4ph6","title":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier...","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T15:30:35Z","modified":"2025-08-21T21:32:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T15:03:22.719724Z"}],"nvd":[{"id":"CVE-2025-52194","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T15:15:33.11Z","modified":"2026-06-17T09:36:19.15Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-121"],"updated_at":"2026-11-02T14:11:25.261243Z"}],"osv":[{"id":"CVE-2025-52194","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T00:00:00Z","modified":"2026-10-28T02:30:26.276249811Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:50.45326Z"},{"id":"DEBIAN-CVE-2025-52194","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"withdrawn","published":"2025-08-21T15:15:33Z","modified":"2025-11-11T19:47:26.560303Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"UBUNTU-CVE-2025-52194","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T15:15:00Z","modified":"2026-10-17T12:56:59.40542574Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"AZL-66669","title":"CVE-2025-52194 affecting package libsndfile 1.0.31-4","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T15:15:33Z","modified":"2026-04-21T04:37:56.690403Z","updated_at":"2026-11-02T15:28:08.354547Z"},{"id":"AZL-66671","title":"CVE-2025-52194 affecting package libsndfile for versions less than 1.2.2-7","description":"A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.","status":"published","published":"2025-08-21T15:15:33Z","modified":"2026-11-07T14:19:43.01913362Z","updated_at":"2026-11-07T14:48:11.583685Z"},{"id":"CLSA-2026-1786483996","title":"libsndfile: Fix of CVE-2025-52194","description":"- CVE-2025-52194: fix undefined behavior on float samplerate cast in\n  ircam_read_header by using psf_lrintf (upstream 7ff854d1)","status":"published","published":"2026-08-11T21:33:27Z","modified":"2026-10-26T09:30:35.710393357Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1786490187","title":"libsndfile: Fix of CVE-2025-52194","description":"- CVE-2025-52194: fix undefined behavior on float samplerate cast in\n  ircam_read_header by using psf_lrintf (upstream 7ff854d1)","status":"published","published":"2026-08-13T05:25:30Z","modified":"2026-10-26T09:31:28.044595561Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1788170819","title":"Fix CVE(s): CVE-2021-4156, CVE-2022-33065, CVE-2025-52194","description":"   * SECURITY UPDATE: multiple signed integer overflows in the AU, MAT4/MAT5,\n     AVR, SDS, AIFF, IRCAM, RF64, PCM and IMA-ADPCM header parsers allow\n     denial of service via a crafted file (ELSCVE-171688)\n     - debian/patches/CVE-2022-33065/CVE-2022-33065-{1..8,11..13}.patch:\n       widen the overflowing data_end, blockwidth and sample-count\n       calculations to sf_count_t in src/au.c, src/mat4.c, src/mat5.c,\n       src/avr.c, src/sds.c, src/aiff.c, src/ircam.c, src/common.h,\n       src/common.c, src/pcm.c, src/rf64.c and src/ima_adpcm.c. Byte-identical\n       to Ubuntu's own patches as shipped in the public focal security source\n       1.0.28-7ubuntu0.3 (same upstream 1.0.28, same 13-patch prefix); the\n       bionic +esm1 artifact itself is Ubuntu Pro-gated. Note that Ubuntu's\n       CVE-2022-33065-13.patch is a squash of three upstream commits rather\n       than the single one its header names: 3970faeb (IMA ADPCM nibble\n       sizing) and 7e6cc7cb (stepindx initialisation) are prerequisites that\n       1.0.28 predates, alongside the cited 9f097e49 which carries the\n       CVE-2022-33065 fix proper; all three are credited in that patch's\n       provenance note.\n     - CVE-2022-33065\n   * SECURITY UPDATE: out-of-bounds read in the FLAC decoder when a frame\n     fails to decode and the stale frame pointer is reused (ELSCVE-171682)\n     - debian/patches/CVE-2021-4156.patch: NULL pflac-\u003eframe when\n       FLAC__stream_decoder_process_single() fails in flac_read_loop() in\n       src/flac.c. Byte-identical to Ubuntu's own patch as shipped in the\n       public focal security source 1.0.28-7ubuntu0.3; upstream commit\n       ced91d7b971be6173b604154c39279ce90ad87cc.\n     - CVE-2021-4156\n   * SECURITY UPDATE: undefined float-to-int conversion of the IRCAM header\n     sample rate on out-of-range or non-finite values (ELSCVE-171686)\n     - debian/patches/CVE-2025-52194.patch: convert the file-supplied sample\n       rate with lrintf() instead of a bare (int) cast in ircam_read_header()\n       in src/ircam.c, and include \u003cmath.h\u003e. Backport of upstream commit\n       7ff854d1e0bd9a751a9ff52ed980c62afced91fe, adapted because 1.0.28 has\n       no psf_lrintf() helper; src/mat4.c already uses lrint() for the same\n       purpose in this tree.\n     - CVE-2025-52194","status":"published","published":"2026-08-31T10:07:11Z","modified":"2026-10-26T09:32:04.278067553Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"MGASA-2026-0215","title":"Updated libsndfile packages fix security vulnerabilities","description":"CVE-2025-52194 A buffer overflow vulnerability exists in libsndfile\nversion 1.2.2 and potentially earlier versions when processing malformed\nIRCAM audio files. The vulnerability occurs in the ircam_read_header\nfunction at src/ircam.c:164 during sample rate processing, leading to\nmemory corruption and potential code execution.\nCVE-2025-56226 Libsndfile \u003c=1.2.2 contains a memory leak vulnerability\nin the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.\nCVE-2026-37555 An issue was discovered in libsndfile 1.2.2 IMA ADPCM\ncodec. The AIFF code path (line 241) was fixed with (sf_count_t) cast,\nbut the WAV code path (line 235) and close path (line 167) were not.\nWhen samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit\nmultiplication overflows before being assigned to sf.frames\n(sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the\nproduct 2500000000 overflows to -1794967296. This causes incorrect frame\ncount leading to heap buffer overflow or denial of service. Both values\ncome from the WAV file header and are attacker-controlled. This issue\nwas discovered after an incomplete fix for CVE-2022-33065.\n","status":"published","published":"2026-06-16T04:58:51Z","modified":"2026-06-16T05:00:06.100572689Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10730-1","title":"libsndfile-devel-1.2.2-5.1 on GA media","description":"These are all security issues fixed in the libsndfile-devel-1.2.2-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-08T00:00:00Z","modified":"2026-05-09T07:46:32.176533Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:20787-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues\n\n- CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM\n  audio files (bsc#1248458).\n- CVE-2025-56226: memory leak in the `mpeg_l3_encoder_init()` function of `mpeg_l3_encode.c` (bsc#1256702).\n- CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).\n\nChanges for libsndfile:\n","status":"published","published":"2026-05-22T08:43:26Z","modified":"2026-05-26T18:24:14.543983665Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:1968-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues\n\n- CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM\n  audio files (bsc#1248458).\n- CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).\n","status":"published","published":"2026-05-18T08:14:45Z","modified":"2026-05-19T08:45:12.092073005Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:1969-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues\n\n- CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM\n  audio files (bsc#1248458).\n- CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).\n","status":"published","published":"2026-05-18T08:15:08Z","modified":"2026-05-19T08:45:12.1387897Z","updated_at":"2026-11-02T15:54:01.610851Z"},{"id":"SUSE-SU-2026:21826-1","title":"Security update for libsndfile","description":"This update for libsndfile fixes the following issues\n\n- CVE-2025-52194: buffer overflow in the ircam_read_header function of file src/ircam.c when processing malformed IRCAM\n  audio files (bsc#1248458).\n- CVE-2025-56226: memory leak in the `mpeg_l3_encoder_init()` function of `mpeg_l3_encode.c` (bsc#1256702).\n- CVE-2026-37555: IMA-ADPCM integer overflow (bsc#1263695).\n\nChanges for libsndfile:\n","status":"published","published":"2026-05-22T08:43:20Z","modified":"2026-05-28T18:24:16.271001196Z","updated_at":"2026-11-02T15:54:02.654057Z"}]}}