GCVE - cpe:2.3:a:libsndfile_project:libsndfile:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:libsndfile_project:libsndfile:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Libsndfile Project (`7ed2b748-49d8-57bc-95a5-8b169415ec79`)
Product	Libsndfile (`a8f608ad-78d2-53b4-a74a-b40e620e28a9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:deb/debian/libsndfile`	purl2cpe	2026-06-01 10:13:13.473354
`pkg:deb/ubuntu/libsndfile`	purl2cpe	2026-06-01 10:13:13.473355
`pkg:github/libsndfile/libsndfile`	purl2cpe	2026-06-01 10:13:13.473356
`pkg:rpm/centos/libsndfile`	purl2cpe	2026-06-01 10:13:13.473358
`pkg:rpm/fedora/libsndfile`	purl2cpe	2026-06-01 10:13:13.473359
`pkg:rpm/opensuse/libsndfile`	purl2cpe	2026-06-01 10:13:13.473360

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-50613`	vulnerable	2026-06-08 06:52:11.285274	Details available libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close. Published: 2024-10-27T00:00:00.000Z Updated: 2024-10-30T19:13:18.634Z Open on db.gcve.eu Reference links https://github.com/libsndfile/libsndfile/issues/1034	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-50612`	vulnerable	2026-06-08 06:52:11.283485	Details available libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read. Published: 2024-10-27T00:00:00.000Z Updated: 2024-10-30T20:47:04.173Z Open on db.gcve.eu Reference links https://github.com/libsndfile/libsndfile/issues/1035	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-33065`	vulnerable	2026-06-08 05:44:46.182310	Details available Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts. Published: 2023-07-18T00:00:00.000Z Updated: 2024-10-28T18:23:22.077Z Open on db.gcve.eu Reference links https://github.com/libsndfile/libsndfile/issues/833 https://github.com/libsndfile/libsndfile/issues/789	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.