CVE-2026-88372

A flaw was found in libsndfile. An attacker could exploit this vulnerability by tricking a user or service into processing a specially crafted MAT4 (MATLAB v4) audio file. Due to an integer overflow during header parsing in the mat4_read_header() function, this can cause memory corruption and trigger an application crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because successful exploitation requires user interaction to process an untrusted sound file, confining the consequences to application termination without enabling code execution or privilege escalation. In Red Hat Enterprise Linux, libsndfile is consumed by client applications and media frameworks to decode various sound formats. An attacker supplying a malformed MATLAB v4 file can cause the consuming process to terminate unexpectedly, resulting strictly in a local denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.