Feed/CVE-2026-88386
CVE-2026-88386MEDIUMCVSS 5.5

CVE-2026-88386

Published Sep 24, 2026·Updated Sep 25, 2026

NVD Description

libsndfile 1.2.2 contains a misaligned memory access issue in psf_binheader_readf() while parsing WAV fmt chunks. A specially crafted WAV file can cause the function to cast an unaligned destination address to unsigned int * and perform a 4-byte store. This results in undefined behavior leading to denial of service.

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free