CVE-2026-88386

libsndfile 1.2.2 is vulnerable to a misaligned memory access issue within the psf_binheader_readf() function during the parsing of WAV fmt chunks . A specially crafted WAV file can trigger the function to cast an unaligned destination address to an **unsigned int ***, resulting in a 4-byte store ...