Libsndfile version prior to 1.2.2-7.oe2403sp4 contains a vulnerability in the psf_binheader_readf() function when parsing WAV fmt chunks. A specially crafted WAV file can trigger a misaligned memory access causing undefined behavior and resulting in a denial of service condition. This issue is fixed in version 1.2.2-7.oe2403sp4.