CVE-2026-37555

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-37555
An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 Exploit Third Party Advisory
https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 Patch
https://github.com/libsndfile/libsndfile/issues/833 Issue Tracking
https://github.com/libsndfile/libsndfile/issues/833 Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:libsndfile_project:libsndfile:1.2.2:*:*:*:*:*:*:*
History

01 May 2026, 18:37

Type Values Removed Values Added
CPE cpe:2.3:a:libsndfile_project:libsndfile:1.2.2:*:*:*:*:*:*:*
First Time Libsndfile Project
Libsndfile Project libsndfile
References () https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 - () https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 - Exploit, Third Party Advisory
References () https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 - () https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151 - Patch
References () https://github.com/libsndfile/libsndfile/issues/833 - () https://github.com/libsndfile/libsndfile/issues/833 - Issue Tracking

30 Apr 2026, 20:16

Type Values Removed Values Added
References
  • () https://gist.github.com/sgInnora/a5f5c19e4bf6f4fb74fab7b0ef2bfcc1 -

30 Apr 2026, 15:48

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-29 16:16

Updated : 2026-05-01 18:37

NVD link : CVE-2026-37555

Mitre link : CVE-2026-37555

CVE.ORG link : CVE-2026-37555

JSON object : View

Products Affected

libsndfile_project

  • libsndfile
CWE
CWE-190

Integer Overflow or Wraparound