Libsndfile Project Libsndfile vulnerabilities

• libsndfile project libsndfile, red hat ai inference server 3.3, enterprise linux 10 +14 more +16 more An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was... CVE-2026-37555 Fix available 7.5 HighApril 29, 2026
• libsndfile project libsndfile Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function... CVE-2025-56226 Fix available 5.3 MediumJanuary 14, 2026
• libsndfile project libsndfile A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier... CVE-2025-52194 Fix available 7.5 HighAugust 21, 2025
• libsndfile project libsndfile libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in... CVE-2024-50613 Fix available 6.5 MediumOctober 27, 2024
• libsndfile project libsndfile libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. CVE-2024-50612 Fix available 5.5 MediumOctober 27, 2024
• libsndfile project libsndfile Multiple signed integers overflow in function au_read_header in src/au.c and in functions... CVE-2022-33065 Fix available 7.8 HighJuly 18, 2023
• libsndfile project libsndfile An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a... CVE-2022-33064 Fix available 7.8 HighJuly 18, 2023
• libsndfile project libsndfile, debian linux +1 more An out-of-bounds read flaw was found in libsndfile's FLAC codec functionality. An attacker who is... CVE-2021-4156 Fix available 7.1 HighJanuary 5, 2022
• libsndfile project libsndfile, debian linux, fedoraproject fedora +2 more A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows... CVE-2021-3246 Fix available 8.8 HighJuly 20, 2021
• [unknown] libsndfile, canonical ubuntu linux, debian linux +2 more It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a... CVE-2019-3832 Fix available 3.3 LowMarch 13, 2019
• libsndfile project libsndfile, debian linux +1 more There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that... CVE-2018-19758 Fix available 6.5 MediumNovember 29, 2018
• libsndfile project libsndfile, debian linux +1 more An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function... CVE-2018-19662 Fix available 8.1 HighNovember 29, 2018
• libsndfile project libsndfile, debian linux +1 more An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function... CVE-2018-19661 Fix available 6.5 MediumNovember 29, 2018
• libsndfile project libsndfile, debian linux +1 more An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function... CVE-2018-19432 Fix available 6.5 MediumNovember 22, 2018
• libsndfile project libsndfile ** DISPUTED ** An issue has been found in libsndfile 1.0.28. There is a memory leak in... CVE-2018-13419 Disputed 6.5 MediumJuly 7, 2018
• libsndfile project libsndfile, debian linux +1 more A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote... CVE-2018-13139 Fix available 8.8 HighJuly 4, 2018
• libsndfile project libsndfile In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function... CVE-2017-16942 Fix available 6.5 MediumNovember 25, 2017
• libsndfile project libsndfile, debian linux +1 more In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c... CVE-2017-14634 Fix available 6.5 MediumSeptember 21, 2017
• libsndfile project libsndfile, debian linux +1 more An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a... CVE-2017-14246 Fix available 8.1 HighSeptember 21, 2017
• libsndfile project libsndfile, debian linux +1 more An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a... CVE-2017-14245 Fix available 8.1 HighSeptember 21, 2017
• libsndfile project libsndfile, debian linux +1 more Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through... CVE-2017-12562 Fix available 9.8 CriticalAugust 5, 2017
• flexera software llc libsndfile In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be... CVE-2017-6892 Fix available 8.8 HighJune 12, 2017
• libsndfile project libsndfile, debian linux +1 more The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial... CVE-2017-8365 Fix available 6.5 MediumApril 30, 2017
• libsndfile project libsndfile, debian linux +1 more The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a... CVE-2017-8363 Fix available 6.5 MediumApril 30, 2017
• libsndfile project libsndfile, debian linux +1 more The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a... CVE-2017-8362 Fix available 6.5 MediumApril 30, 2017
• libsndfile project libsndfile, debian linux +1 more The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a... CVE-2017-8361 Fix available 8.8 HighApril 30, 2017
• libsndfile project libsndfile In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be... CVE-2017-7742 Fix available 5.5 MediumApril 12, 2017
• libsndfile project libsndfile In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be... CVE-2017-7741 Fix available 5.5 MediumApril 12, 2017
• libsndfile project libsndfile In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling... CVE-2017-7586 Fix available 5.5 MediumApril 7, 2017
• libsndfile project libsndfile In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be... CVE-2017-7585 Fix available 5.5 MediumApril 7, 2017
• libsndfile project libsndfile, canonical ubuntu linux, opensuse leap +1 more +3 more The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service ... CVE-2014-9756 Fix available 5.0 MediumNovember 12, 2015
• libsndfile project libsndfile, canonical ubuntu linux, debian linux +2 more +4 more The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified... CVE-2014-9496 Fix available 2.1 LowJanuary 8, 2015