Libsndfile versions prior to 1.0.31-8.oe2203sp4 contain a vulnerability in the WAV parsing component where use of an uninitialized variable occurs in the wavlike_subchunk_parse function. This flaw allows remote exploitation and has publicly available exploit code. The vulnerability is rated high severity with a CVSS score of 7.5 and impacts availability. A patch is available in version 1.0.31-8.oe2203sp4.