libsndfile project libsndfile

Name: libsndfile project libsndfile
Brand: libsndfile project

productUS

cpe:2.3:a:libsndfile_project:libsndfile:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical10high17medium1low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-12562US	critical9.8	3.98% (90th)	—	no fix	2017-08-05	= 1.0.28
CVE-2017-8361US	high8.8	3.90% (90th)	—	no fix	2017-04-30	= 1.0.28
CVE-2018-13139US	high8.8	3.57% (89th)	—	no fix	2018-07-04	= 1.0.28
CVE-2017-8365US	medium6.5	3.42% (89th)	—	no fix	2017-04-30	= 1.0.28
CVE-2017-8362US	medium6.5	3.42% (89th)	—	no fix	2017-04-30	= 1.0.28
CVE-2017-8363US	medium6.5	3.33% (89th)	—	no fix	2017-04-30	= 1.0.28
CVE-2021-3246US	high8.8	3.12% (88th)	—	no fix	2021-07-20	= 1.0.30
CVE-2018-19432US	medium6.5	2.96% (87th)	—	no fix	2018-11-22	= 1.0.28
CVE-2014-9756US	medium5.0	2.83% (87th)	—	1.0.26	2015-11-19	< 1.0.26
CVE-2017-6892US	high8.8	2.48% (85th)	—	no fix	2017-06-12	= 1.0.28
CVE-2018-19662US	high8.1	2.31% (83rd)	—	no fix	2018-11-29	= 1.0.28
CVE-2017-14246US	high8.1	2.23% (83rd)	—	no fix	2017-09-21	= 1.0.28
CVE-2017-14634US	medium6.5	2.08% (81st)	—	no fix	2017-09-21	= 1.0.28
CVE-2018-19661US	medium6.5	2.05% (81st)	—	no fix	2018-11-29	= 1.0.28
CVE-2017-14245US	high8.1	2.04% (81st)	—	no fix	2017-09-21	= 1.0.28
CVE-2021-4156US	high7.1	1.75% (78th)	—	no fix	2022-03-23	= 1.1.10
CVE-2018-19758US	medium6.5	1.69% (77th)	—	no fix	2018-11-30	= 1.0.28
CVE-2017-7585US	medium5.5	1.48% (74th)	—	no fix	2017-04-07	≤ 1.0.27
CVE-2017-7742US	medium5.5	1.39% (72nd)	—	no fix	2017-04-12	≤ 1.0.27
CVE-2017-7741US	medium5.5	1.31% (70th)	—	no fix	2017-04-12	≤ 1.0.27
CVE-2018-13419US	medium6.5	1.27% (70th)	—	no fix	2018-07-07	= 1.0.28
CVE-2017-7586US	medium5.5	1.24% (69th)	—	no fix	2017-04-07	≤ 1.0.27
CVE-2017-16942US	medium6.5	1.23% (69th)	—	no fix	2017-11-25	= 1.0.25
CVE-2025-52194US	—	0.65% (51st)	—	no fix	2025-08-21	≤ 1.2.2
CVE-2014-9496US	low2.1	0.58% (48th)	—	1.0.26	2015-01-16	< 1.0.26
CVE-2024-50613US	medium6.5	0.54% (45th)	—	no fix	2024-10-27	≤ 1.2.2
CVE-2019-3832US	medium5.5	0.51% (43rd)	—	no fix	2019-03-21	= 1.0.28
CVE-2026-37555US	—	0.50% (43rd)	—	no fix	2026-04-29	= 1.2.2
CVE-2025-56226US	—	0.37% (31st)	—	no fix	2026-01-14	1.1.0 → 1.2.2
CVE-2022-33065US	high7.8	0.36% (30th)	—	no fix	2023-07-18	—
CVE-2022-33064US	high7.8	0.34% (27th)	—	no fix	2023-07-18	= 1.1.0
CVE-2024-50612US	medium5.5	0.31% (24th)	—	no fix	2024-10-27	≤ 1.2.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read12 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer10 CVEs
CWE-369Divide By Zero3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-193Off-by-one Error1 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan