← Back

Libsndfile

libsndfile

Vendor: Libsndfile Project • 32 CVEs

CVEs (32)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
May 13, 2026
Aug 5, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
1Libsndfile Project
1Libsndfile
May 13, 2026
Jun 12, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bounds read memory access via a specially crafted AIFF file.
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
May 13, 2026
Apr 30, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The i2les_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file.
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
May 13, 2026
Apr 30, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
May 13, 2026
Apr 30, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file.
2Debian
Libsndfile Project
2Debian Linux
Libsndfile
May 13, 2026
Apr 30, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file...Show more
The flac_buffer_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.Show less
1Libsndfile Project
1Libsndfile
May 13, 2026
Apr 12, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt...Show more
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.Show less
1Libsndfile Project
1Libsndfile
May 13, 2026
Apr 12, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attemp...Show more
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.Show less
1Libsndfile Project
1Libsndfile
May 13, 2026
Apr 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
1Libsndfile Project
1Libsndfile
May 13, 2026
Apr 7, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially crafted FLAC file.
3Canonical
Libsndfile ProjectOpensuse
4Leap
LibsndfileOpensuse+1 more
May 6, 2026
Nov 19, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The psf_fwrite function in file_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash) via unspecified vectors related to the headindex variable.
5Canonical
DebianLibsndfile Project+2 more
5Debian Linux
LibsndfileOpensuse+2 more
May 6, 2026
Jan 16, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.