Threats affecting pkg:github/libsndfile/libsndfile

A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

libsndfile version 1.2.2 contains a vulnerability in the psf_binheader_readf() function related to misaligned memory access when parsing WAV format chunks. This flaw can cause undefined behavior due to an unaligned 4-byte store, potentially leading to a denial of service. The vulnerability requires user interaction to trigger and has a medium severity rating with a CVSS score of 5.5. No patch or fix information is currently available.

libsndfile version 1.2.2 and earlier contain an integer overflow vulnerability in the mat4_read_header() function when parsing specially crafted MATLAB v4 (MAT4) files. This flaw can cause a denial of service by crashing the application. The vulnerability has a CVSS score of 7.5, indicating high severity, but does not impact confidentiality or integrity. No known exploits are reported in the wild. No patch information is provided, so users should consult vendor advisories for remediation status.

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

CVE-2025-56226 is a medium severity memory leak vulnerability in Libsndfile version 1.2.2 and earlier. The issue exists in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c source file. This vulnerability does not impact confidentiality or integrity but can cause resource exhaustion due to leaking memory. There are no known exploits in the wild and no patch or official remediation information is currently available.

libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.

libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.