CVE-2017-16942: Libsndfile Project Libsndfile

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In libsndfile 1.0.25 (fixed in 1.0.26), a divide-by-zero error exists in the function wav_w64_read_fmt_chunk() in wav_w64.c, which may lead to DoS when playing a crafted audio file.

Affected products

• Libsndfile Project Libsndfile: version 1.0.25 only

Published 2017-11-25. Last modified 2026-06-17.