libsndfile: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2026-88372

  libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4)…

  libsndfile libsndfile libsndfile Debian Ubuntu Azure Linux
  Sep 24, 2026
• Medium 5.5
  CVE-2026-88386

  libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A spe…

  libsndfile libsndfile libsndfile Debian Ubuntu Azure Linux
  Sep 24, 2026

Revision history

1. 2026-11-08 #3

   Neue Updates von openSUSE aufgenommen

2. 2026-10-28 #2

   Neue Updates von openSUSE aufgenommen

3. 2026-09-24 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2026-09-24
  https://github.com/advisories/GHSA-49WV-792F-4PR7
• GitHub Advisory Database vom 2026-09-24
  https://github.com/advisories/GHSA-X44M-83P2-J4H6
• openSUSE Security Update OPENSUSE-SU-2026:12142-1 vom 2026-10-29
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VPJV3QE2GIW34DMUFCBLMPZTS4DHZBZE/
• openSUSE Security Update OPENSUSE-SU-2026:12243-1 vom 2026-11-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/56RVRB44CYBGHZOF6RCCJYZ5LU4MJY6D/