Libsndfile
Approved changes feed: RSS · Atom
cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Libsndfile Project (7ed2b748-49d8-57bc-95a5-8b169415ec79) |
|---|---|
| Product | Libsndfile (a8f608ad-78d2-53b4-a74a-b40e620e28a9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libsndfile |
purl2cpe | 2026-06-01 10:13:13.473345 |
pkg:deb/ubuntu/libsndfile |
purl2cpe | 2026-06-01 10:13:13.473347 |
pkg:github/libsndfile/libsndfile |
purl2cpe | 2026-06-01 10:13:13.473348 |
pkg:rpm/centos/libsndfile |
purl2cpe | 2026-06-01 10:13:13.473350 |
pkg:rpm/fedora/libsndfile |
purl2cpe | 2026-06-01 10:13:13.473351 |
pkg:rpm/opensuse/libsndfile |
purl2cpe | 2026-06-01 10:13:13.473352 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-56226 |
vulnerable | 2026-06-08 07:33:15.549972 |
Details available
Libsndfile <=1.2.2 contains a memory leak vulnerability in the mpeg_l3_encoder_init() function within the mpeg_l3_encode.c file.
Published: 2026-01-14T00:00:00.000Z
Updated: 2026-01-14T14:57:00.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52194 |
vulnerable | 2026-06-08 07:31:11.404925 |
Details available
A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.
Published: 2025-08-21T00:00:00.000Z
Updated: 2025-08-21T19:56:46.362Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50613 |
vulnerable | 2026-06-08 06:52:11.285558 |
Details available
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
Published: 2024-10-27T00:00:00.000Z
Updated: 2024-10-30T19:13:18.634Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50612 |
vulnerable | 2026-06-08 06:52:11.284845 |
Details available
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.
Published: 2024-10-27T00:00:00.000Z
Updated: 2024-10-30T20:47:04.173Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7742 |
vulnerable | 2026-06-08 05:10:06.017189 |
Details available
In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access) via a specially crafted FLAC file during a resample attempt, a similar issue to CVE-2017-7585.
Published: 2017-04-12T18:00:00.000Z
Updated: 2024-08-05T16:12:28.431Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7741 |
vulnerable | 2026-06-08 05:10:06.016746 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7586 |
vulnerable | 2026-06-08 05:09:56.587066 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7585 |
vulnerable | 2026-06-08 05:09:56.586592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9756 |
vulnerable | 2026-06-08 05:06:12.941405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9496 |
vulnerable | 2026-06-08 05:06:11.969196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.