High severity7.8NVD Advisory· Published Jul 18, 2023· Updated Jun 17, 2026
CVE-2022-33065
CVE-2022-33065
Description
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
31cpe:2.3:a:libsndfile_project:libsndfile:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libsndfile_project:libsndfile:-:*:*:*:*:*:*:*
- (no CPE)
- Libsndfile/Libsndfiledescription
- osv-coords28 versionspkg:rpm/almalinux/libsndfilepkg:rpm/almalinux/libsndfile-develpkg:rpm/almalinux/libsndfile-utilspkg:rpm/opensuse/libsndfile&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/libsndfile&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/libsndfile&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/libsndfile-progs&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/libsndfile-progs&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/libsndfile&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/libsndfile&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/libsndfile&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/libsndfile&distro=SUSE%20Manager%20Server%204.2
< 1.0.31-8.el9+ 27 more
- (no CPE)range: < 1.0.31-8.el9
- (no CPE)range: < 1.0.31-8.el9
- (no CPE)range: < 1.0.31-8.el9
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.2.2-1.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.25-36.29.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.25-36.29.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.25-36.29.1
- (no CPE)range: < 1.0.28-150000.5.20.1
- (no CPE)range: < 1.0.28-150000.5.20.1
Patches
Vulnerability mechanics
References
2- github.com/libsndfile/libsndfile/issues/833nvdExploitIssue Tracking
- github.com/libsndfile/libsndfile/issues/789nvdIssue Tracking
News mentions
0No linked articles in our index yet.