CVE-2025-52194 is a buffer overflow vulnerability in libsndfile version 1.2.2 and potentially earlier, specifically when processing malformed IRCAM audio files. This flaw, located in the ircam_read_header function, can lead to memory corruption and potential code execution. Rated 7.5 HIGH, it is network-exploitable with low attack complexity and no user interaction, primarily impacting availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.2.2CPE matchmatch criteria | cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
libsndfile: buffer overflow when processing crafted IRCAM audio files
Aug 21, 2025A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircam_read_header function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.
Aug 12, 2025