Approved changes feed: RSS · Atom

cpe:2.3:a:libsndfile_project:libsndfile:1.0.28:*:*:*:*:*:*:*

part: a version: 1.0.28 update: *

VendorLibsndfile Project (7ed2b748-49d8-57bc-95a5-8b169415ec79)
ProductLibsndfile (a8f608ad-78d2-53b4-a74a-b40e620e28a9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libsndfile purl2cpe 2026-06-01 10:13:13.473563
pkg:deb/ubuntu/libsndfile purl2cpe 2026-06-01 10:13:13.473564
pkg:github/libsndfile/libsndfile purl2cpe 2026-06-01 10:13:13.473566
pkg:rpm/centos/libsndfile purl2cpe 2026-06-01 10:13:13.473567
pkg:rpm/fedora/libsndfile purl2cpe 2026-06-01 10:13:13.473568
pkg:rpm/opensuse/libsndfile purl2cpe 2026-06-01 10:13:13.473570

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-3832 vulnerable 2026-06-08 05:13:56.153600 Details available
LOW (3.3)
It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buffer in wav_write_header() function in wav.c. A local attacker may use this flaw to make the application crash.
Published: 2019-03-20T20:00:27.000Z
Updated: 2024-08-04T19:19:18.550Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19758 vulnerable 2026-06-08 05:11:16.076451 Details available
There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service.
Published: 2018-11-30T03:00:00.000Z
Updated: 2024-08-05T11:44:20.190Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19662 vulnerable 2026-06-08 05:11:15.998050 Details available
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service.
Published: 2018-11-29T07:00:00.000Z
Updated: 2024-08-05T11:44:20.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19661 vulnerable 2026-06-08 05:11:15.997559 Details available
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.
Published: 2018-11-29T07:00:00.000Z
Updated: 2024-08-05T11:44:19.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19432 vulnerable 2026-06-08 05:11:15.732467 Details available
An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, which will lead to a denial of service.
Published: 2018-11-22T05:00:00.000Z
Updated: 2024-08-05T11:37:11.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13419 vulnerable 2026-06-08 05:10:51.302132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13139 vulnerable 2026-06-08 05:10:50.967886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8365 vulnerable 2026-06-08 05:10:08.126233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8363 vulnerable 2026-06-08 05:10:08.123854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8362 vulnerable 2026-06-08 05:10:08.123347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8361 vulnerable 2026-06-08 05:10:08.122863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6892 vulnerable 2026-06-08 05:09:55.118999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14634 vulnerable 2026-06-08 05:08:50.311931 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14246 vulnerable 2026-06-08 05:08:49.516313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14245 vulnerable 2026-06-08 05:08:49.515872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12562 vulnerable 2026-06-08 05:08:47.038775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.