This vulnerability in libsndfile 1.2.2's IMA ADPCM codec arises from an integer overflow during the calculation of frame counts from WAV file header fields samplesperblock and blocks. The overflow causes an incorrect frame count, which may lead to heap buffer overflow or denial of service conditions when processing crafted WAV files. The issue is a regression or incomplete fix of CVE-2022-33065. There is no official patch or remediation level declared at this time.

Exploitation of this vulnerability can cause a denial of service or potentially heap buffer overflow, which may lead to application crashes or memory corruption. There is no indication of confidentiality or integrity impact. No known exploits are reported in the wild as of now.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is available, users should monitor vendor communications for updates. Avoid processing untrusted or malicious WAV files with the affected libsndfile version as a precaution.