CVE-2022-33065: Libsndfile Project Libsndfile

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.

Affected products

• Libsndfile Project Libsndfile: affected versions not specified

Published 2023-07-18. Last modified 2026-06-17.