CVE-2026-88386 Details
Description
libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.
A vulnerability in libsndfile version 1.2.2 has been identified, involving misaligned memory access in the function psf_binheader_readf(). This issue arises when the library parses WAV format chunks from files with a specific wFormatTag. The vulnerability allows a crafted WAV file to cause the function to write data to an improperly aligned memory address, leading to undefined behavior. This misalignment can cause a bus error on strict-alignment architectures or trigger a process termination in a fail-fast build with Undefined Behavior Sanitizer enabled.
The vulnerability has been addressed in a commit that modifies the psf_binheader_readf() function to use memcpy for storing unaligned data, ensuring proper alignment and preventing undefined behavior. Users should update to the latest version of libsndfile to apply this fix.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/libsndfile/libsndfile/issues/1150 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/mhlavink/libsndfileci/commit/474e4d328b1e6240b93ec6ed14efb7c6a44bee57 | [email protected] | Source Code |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| libsndfile | 1.2.2 (semver) HEAD 7ff854d |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 24, 2026 | New CVE Received | [email protected] |