CVE-2026-88386

A flaw was found in libsndfile. This issue occurs due to a misaligned memory access when parsing WAV format chunks in the psf_binheader_readf() function. By convincing an application or user to process a specially crafted WAV audio file, an attacker can trigger an unexpected crash, leading to a Denial of Service (DoS).

Red Hat Product Security rates this vulnerability as Moderate because exploitation requires a user to open a crafted audio file, limiting the blast radius to the application handling the file. In standard Red Hat Enterprise Linux installations, libsndfile operates as a shared client library rather than an exposed network daemon. As a result, successful exploitation causes the affected process to terminate unexpectedly, resulting in a denial of service without impacting data confidentiality or integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.