{"schemaVersion":3,"id":"MGASA-2026-0215","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated libsndfile packages fix security vulnerabilities\n\nCVE-2025-52194 A buffer overflow vulnerability exists in libsndfile\nversion 1.2.2 and potentially earlier versions when processing malformed\nIRCAM audio files. The vulnerability occurs in the ircam_read_header\nfunction at src/ircam.c:164 during sample rate processing, leading to\nmemory corruption and potential code execution.\nCVE-2025-56226 Libsndfile <=1.2.2 contains a memory leak vulnerability\nin the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.\nCVE-2026-37555 An issue was discovered in libsndfile 1.2.2 IMA ADPCM\ncodec. The AIFF code path (line 241) was fixed with (sf_count_t) cast,\nbut the WAV code path (line 235) and close path (line 167) were not.\nWhen samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit\nmultiplication overflows before being assigned to sf.frames\n(sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the\nproduct 2500000000 overflows to -1794967296. This causes incorrect frame\ncount leading to heap buffer overflow or denial of service. Both values\ncome from the WAV file header and are attacker-controlled. This issue\nwas discovered after an incomplete fix for CVE-2022-33065.","dates":{"published":"2026-06-16T04:58:51.000Z","modified":"2026-06-16T05:00:06.100Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"libsndfile","name":"libsndfile","label":"libsndfile","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/libsndfile","purlType":"rpm","versions":[{"text":"< 1.2.0-3.3.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.0-3.3.mga9","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2026-0215.html","label":"advisories.mageia.org/MGASA-2026-0215.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35451","label":"bugs.mageia.org/show_bug.cgi?id=35451","hostname":"bugs.mageia.org","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2025-52194","CVE-2025-56226","CVE-2026-37555"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-06-16T04:58:51.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-16T05:00:06.100Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T06:33:49.549Z","stale":false,"partial":false}}