CVE-2025-52194
libsndfile: buffer overflow when processing crafted IRCAM audio files
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 21, 2025
Updated · June 30, 2026
Description
A flaw was found in the libsndfile library. A buffer overflow can be triggered when a specially crafted IRCAM audio file is processed, specifically when attempting to set the sample rate. This issue can cause a crash to the application linked to the library and result in a denial of service.
Statement
To exploit this flaw, an attacker needs to be able to process a specially crafted IRCAM audio file with the application linked to the libsndfile library. Additionally, this issue can cause memory corruption, but the most likely impact is an application crash via a SIGILL signal due to an illegal instruction. Due to these reasons, this vulnerability has been rated with a Moderate severity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Do not process untrusted IRCAM audio files with the libsndfile library.
CVSS / CWE
CVSS 3.1 · 8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')