An update for libsndfile is now available for openEuler-22.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-4859 Final 1.0 1.0 2026-11-11 Initial 2026-11-11 2026-11-11 openEuler SA Tool V1.0 2026-11-11 libsndfile security update An update for libsndfile is now available for openEuler-22.03-LTS-SP4 Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface. Security Fix(es): A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.(CVE-2026-109828) libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.(CVE-2026-88372) An update for libsndfile is now available for openEuler-22.03-LTS-SP4. openEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. High libsndfile https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4859 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-109828 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-88372 https://nvd.nist.gov/vuln/detail/CVE-2026-109828 https://nvd.nist.gov/vuln/detail/CVE-2026-88372 openEuler-22.03-LTS-SP4 libsndfile-1.0.31-8.oe2203sp4.aarch64.rpm libsndfile-debuginfo-1.0.31-8.oe2203sp4.aarch64.rpm libsndfile-debugsource-1.0.31-8.oe2203sp4.aarch64.rpm libsndfile-devel-1.0.31-8.oe2203sp4.aarch64.rpm libsndfile-utils-1.0.31-8.oe2203sp4.aarch64.rpm libsndfile-1.0.31-8.oe2203sp4.src.rpm libsndfile-1.0.31-8.oe2203sp4.x86_64.rpm libsndfile-debuginfo-1.0.31-8.oe2203sp4.x86_64.rpm libsndfile-debugsource-1.0.31-8.oe2203sp4.x86_64.rpm libsndfile-devel-1.0.31-8.oe2203sp4.x86_64.rpm libsndfile-utils-1.0.31-8.oe2203sp4.x86_64.rpm libsndfile-utils-help-1.0.31-8.oe2203sp4.noarch.rpm A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet. 2026-11-11 CVE-2026-109828 openEuler-22.03-LTS-SP4 Medium 4.3 AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N libsndfile security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4859 libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files. 2026-11-11 CVE-2026-88372 openEuler-22.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H libsndfile security update 2026-11-11 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4859