VulnSocial

CVE-2022-33065Disclosure(libsndfile_project / libsndfile)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch libsndfile_project libsndfile systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

libsndfile_project CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Other references
Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • libsndfile

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
libsndfile_project
Products
libsndfile

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-30: 1Patch / Workaround · 2026-04-30: 1Technical Details · 2026-04-30: 104-30
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Open Source Security mailing list@oss_security
    Disclosure

    CVE-2026-37555: libsndfile: IMA-ADPCM integer overflow (incomplete fix for CVE-2022-33065) https://www.openwall.com/lists/oss-security/2026/04/30/7 in WAV open path, leading to undersized buffer allocations and heap corruption during decoding. No patch has been released yet.

    Post summary

    The post announces CVE‑2026‑37555, detailing an integer overflow in libsndfile’s IMA‑ADPCM decoder that leads to heap corruption, and notes that no patch is yet available.

    01060333
    4.7K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Applibsndfile_projectlibsndfile---

Explore more

Back to dashboardlibsndfile_project CVEslibsndfile vulnerabilities