Threats affecting pkg:rpm/redhat/libsndfile

An integer overflow vulnerability (CVE-2026-37555) exists in the libsndfile library's ima_reader_init() function. libsndfile is a C library used for reading and writing sampled sound files such as AIFF, AU, and WAV. This vulnerability affects Red Hat Enterprise Linux 10.0 Extended Update Support and related CodeReady Linux Builder variants. Red Hat has issued a security advisory with an update that addresses this issue. The vulnerability is rated as having an important security impact by Red Hat Product Security.