PT-2026-97928

Name of the Vulnerable Software and Affected Versions libsndfile version 1.2.2 Description An integer overflow occurs in the mat4 read header function when the software parses specially crafted MAT4 MATLAB v4 files. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-88372

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

CVE-2026-88386: Heap-based Buffer Overflow

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88372: Integer Overflow or Wraparound

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

EUVD-2026-86472

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88372

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

EUVD-2026-86271

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

CVE-2026-88372

libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader when parsing crafted MAT4 MATLAB v4 files...

CVE-2026-88372

The libsndfile 1.2.2 library contains an integer overflow vulnerability within the mat4_read_header() function. This flaw can be triggered when the software attempts to parse crafted MAT4 (MATLAB v4) files . The provided documents do not specify the practical consequences of this overflow, the sp...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

CVE-2026-88386

libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int and perform a 4-byte store. This results in undefined behavior leading to deni...

Linux Distros Unpatched Vulnerability : CVE-2026-88386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libsndfile 1.2.2 contains a misaligned memory access issue in psfbinheaderreadf while parsing WAV fmt chunks. A specially crafted WAV file can cause the functio...

CVE-2026-88386

The libsndfile library (version 1.2.2 ) is vulnerable to a misaligned memory access issue within the psf_binheader_readf() function. This flaw occurs during the parsing of WAV fmt chunks , where a specially crafted WAV file can cause the function to cast an unaligned destination address to an uns...

Astra Linux – Vulnerability in libsndfile

Multiple signed integer overflows occur in the aureadheader function in src/au.c, as well as in the mat4open and mat4readheader functions in src/mat4.c within Libsndfile. This vulnerability allows an attacker to cause a Denial of Service or other unspecified impacts...

Astra Linux – Vulnerability in libsndfile

A heap buffer overflow vulnerability in the msadpcmDecodeBlock function of libsndfile 1.0.30 allows attackers to execute arbitrary code through a crafted WAV file...

Astra Linux – Vulnerability in libsndfile

A out-of-bounds read flaw was discovered in the FLAC codec functionality of libsndfile. An attacker who can submit a specially crafted file by tricking a user into opening it or otherwise to an application that uses libsndfile and the FLAC codec, could trigger an out-of-bounds read. This would mo...

ROOT-OS-DEBIAN-12-CVE-2026-37555 CVE-2026-37555 in libsndfile - Patched by Root

Root has patched CVE-2026-37555 in the libsndfile package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2022-33064 CVE-2022-33064 in libsndfile - Patched by Root

Root has patched CVE-2022-33064 in the libsndfile package for Root:Debian:12. Multiple fixed versions available...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.0.1.6)

The version of AHV installed on the remote host is prior to 11.0.1.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.0.1.6 advisory. - In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an applicatio...

Oracle Linux 10 : libsndfile (ELSA-2026-19560)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19560 advisory. 1.2.2-6.1 - apply patch for CVE-2026-37555 Resolves: ?RHEL-174531 Tenable has extracted the preceding description block directly from the Oracle Linux securit...