Search threats, CVEs… ⌘K
Back to vendor advisories
Microsoft Security Response CenterCVE-2026-37555

An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec. The AIFF code path (line 241) was fixed with (sf_count_t) cast, but the WAV code path (line 235) and close path (line 167) were not. When samplesperblock (int) * blocks (int) exceeds INT_MAX, the 32-bit multiplication overflows before being assigned to sf.frames (sf_count_t/int64). With samplesperblock=50000 and blocks=50000, the product 2500000000 overflows to -1794967296. This causes incorrect frame count leading to heap buffer overflow or denial of service. Both values come from the WAV file header and are attacker-controlled. This issue was discovered after an incomplete fix for CVE-2022-33065.

Mariner

Read the vendor bulletin Get alerts for cbl2 libsndfile 1.0.31-4 on CBL Mariner
7.5CVSS out of 10High severity
Scope

What the vendor says is affected

  • cbl2 libsndfile 1.0.31-4 on CBL Mariner 2.0
  • cbl2 libsndfile 1.0.31-4 on CBL-Mariner 2.0
  • azl3 libsndfile 1.2.2-4 on Azure Linux 3.0

Versions the vendor lists as fixed

  • 1.2.2-5
Next step

What the vendor recommends

Release Notes CBL-Mariner Releases

Review the complete instructions on the vendor's site
Timeline

When this advisory changed

  1. Published by Microsoft Security Response Center

    The publication date reported by the vendor.

  2. Updated by Microsoft Security Response Center

    The vendor changed the advisory after it was first published.

  3. Added to SecurityAlert

    We collected the advisory from the official source.

Vulnerabilities

CVEs named in this advisory

CVE-2022-33065View CVSS, KEV, EPSS, and threat contextCVE-2026-37555View CVSS, KEV, EPSS, and threat context
Keep investigating
See every advisory from this vendor