OSV security advisoryHigh
High advisory for libsndfile
OESA-2026-4662 · Reported 4 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
libsndfileAffected product
Advisory overview
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372)
Affected packages and releases
openEuler:24.03-LTS-SP1 / libsndfile
introduced: 0 · fixed: 1.2.2-8.oe2403sp1