CVE-2011-2696: Mega-Nerd Libsndfile

Medium severity, CVSS 6.8. EPSS: 4.6% chance of exploitation in the next 30 days.

Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PARIS Audio Format (PAF) file that triggers a heap-based buffer overflow.

Affected products

• Mega-Nerd Libsndfile: up to and including 1.0.24; version 0.0.8 only; version 0.0.28 only; version 1.0.0 only; version 1.0.1 only; version 1.0.2 only; …

Published 2011-07-27. Last modified 2026-06-16.