Known Vulnerabilities for Libsndfile by Libsndfile Project

Listed below are 10 of the newest known vulnerabilities associated with "Libsndfile" by "Libsndfile Project".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2021-3246 A heap buffer overflow vulnerability in msadpcm_decode_block of libsndfile 1.0.30 allows attackers to execute arbitrary code ... 8.8 - HIGH 2021-07-20 2023-11-07
CVE-2019-3832 It was discovered the fix for CVE-2018-19758 (libsndfile) was not complete and still allows a read beyond the limits of a buf... 5.5 - MEDIUM 2019-03-21 2023-03-01
CVE-2018-19758 There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of service. 6.5 - MEDIUM 2018-11-30 2020-10-29
CVE-2018-19662 An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will le... 8.1 - HIGH 2018-11-29 2020-10-29
CVE-2018-19661 An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will le... 6.5 - MEDIUM 2018-11-29 2020-10-29
CVE-2018-19432 An issue was discovered in libsndfile 1.0.28. There is a NULL pointer dereference in the function sf_write_int in sndfile.c, ... 6.5 - MEDIUM 2018-11-22 2019-06-10
CVE-2018-13419 ** DISPUTED ** An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstra... 6.5 - MEDIUM 2018-07-07 2023-11-07
CVE-2018-13139 A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of ser... 8.8 - HIGH 2018-07-04 2020-08-24
CVE-2017-7585 In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based b... 5.5 - MEDIUM 2017-04-07 2017-07-11
CVE-2017-6892 In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-of-bou... 8.8 - HIGH 2017-06-12 2020-10-29

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationLibsndfile ProjectLibsndfile1.0.9AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.8AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.7AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.6AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.5AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.4AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.3AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.29pre1AllAll
ApplicationLibsndfile ProjectLibsndfile1.0.28AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.27AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.26AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.25AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.24AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.23AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.22AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.21AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.20AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.2AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.19AllAllAll
ApplicationLibsndfile ProjectLibsndfile1.0.18AllAllAll
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report