CVE-2025-52194

HIGH7.5

A buffer overflow vulnerability exists in libsndfile version 1

Published Aug 21, 2025

Modified 9 months ago

Details

A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.

References

WEB

https://bushido-sec.com/index.php/2025/08/08/libsndfile-buffer-overflow/

WEB

https://github.com/libsndfile

WEB

https://github.com/libsndfile/libsndfile/issues/1082

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-52194

CVSS Analysis

CVSS v3.1

7.5