The vulnerability in libsndfile 1.2.2 involves an integer overflow in the WAV code path of the IMA ADPCM codec. Specifically, when the product of samplesperblock and blocks (both 32-bit integers) exceeds INT_MAX, the multiplication overflows before being assigned to sf.frames, a 64-bit variable. This results in an incorrect frame count that can cause a heap buffer overflow or denial of service. Both samplesperblock and blocks are derived from attacker-controlled WAV file headers. This issue was identified following an incomplete fix for CVE-2022-33065. Red Hat has issued security advisories and updates for affected packages in Red Hat Enterprise Linux 10.0 Extended Update Support to remediate this integer overflow.

The integer overflow can lead to a heap buffer overflow or denial of service when processing crafted WAV files with large samplesperblock and blocks values. This can cause application crashes or potentially memory corruption. There is no indication of confidentiality or integrity impact. The vulnerability is remotely exploitable without privileges or user interaction, as it involves processing of attacker-controlled WAV file headers.

Red Hat has released security updates for libsndfile in Red Hat Enterprise Linux 10.0 Extended Update Support that fix this integer overflow vulnerability. Users should apply these official patches as detailed in Red Hat advisory RHSA-2026:25092. Patch status is confirmed as an official fix available from Red Hat. No additional mitigation is required beyond applying the vendor-provided updates.