CVE-2015-7805

CVE-2015-7805 describes a critical heap-based buffer overflow vulnerability in libsndfile version 1.0.25, affecting products like mega-nerd libsndfile and openSUSE. This flaw allows remote attackers to achieve unspecified but potentially severe impact by manipulating the headindex value within an AIFF file. With a CVSS score of 9.3, this vulnerability is highly severe, indicating a network-based attack with medium complexity that could lead to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking widespread community discussion or media coverage, a local heap overflow exploit (EDB-38447) is publicly available, suggesting potential for exploitation despite no evidence of active widespread attacks.