CVE Database›CVE-2025-52194

CVE-2025-52194

libsndfile: buffer overflow when processing crafted IRCAM audio files

Loading…

Severity

Moderate

Red Hat Product Security

8.2

CVSS 3.1

Review impact separately from score.

Published · August 21, 2025

Updated · June 30, 2026

Description

A flaw was found in the libsndfile library. A buffer overflow can be triggered when a specially crafted IRCAM audio file is processed, specifically when attempting to set the sample rate. This issue can cause a crash to the application linked to the library and result in a denial of service.

Statement

To exploit this flaw, an attacker needs to be able to process a specially crafted IRCAM audio file with the application linked to the libsndfile library. Additionally, this issue can cause memory corruption, but the most likely impact is an application crash via a SIGILL signal due to an illegal instruction. Due to these reasons, this vulnerability has been rated with a Moderate severity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Do not process untrusted IRCAM audio files with the libsndfile library.

CVSS / CWE

CVSS 3.1 · 8.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')