CVE-2022-33064: Libsndfile Project Libsndfile

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts.

Affected products

Published 2023-07-18. Last modified 2026-06-17.