CVE-2025-52194: Buffer Overflow
Published Aug 21, 2025
·Updated
A buffer overflow vulnerability exists in libsndfile version 1.2.2 and potentially earlier versions when processing malformed IRCAM audio files. The vulnerability occurs in the ircamreadheader function at src/ircam.c:164 during sample rate processing, leading to memory corruption and potential code execution.
Affected Software
5 affected components
libsndfile libsndfile<1.2.2
Libsndfile Project Libsndfile<=1.2.2
Microsoft azl3 libsndfile 1.2.2-3
Microsoft cbl2 libsndfile 1.0.31-3
Microsoft cbl2 libsndfile 1.0.31-4
Event History
Aug 21, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 3, 2025
Data Sourced
via Microsoft·11:34 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·11:34 PM
SeverityAffected Software
Updated
via Microsoft·11:34 PM
Affected Software
Sep 4, 2025
Updated
via Microsoft·06:34 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-52194?
CVE-2025-52194 is classified as a high severity buffer overflow vulnerability.
2
How do I fix CVE-2025-52194?
To remediate CVE-2025-52194, upgrade libsndfile to version 1.2.2 or later.
3
What is the impact of CVE-2025-52194?
The impact of CVE-2025-52194 includes potential memory corruption and arbitrary code execution.
4
Which versions of libsndfile are affected by CVE-2025-52194?
CVE-2025-52194 affects libsndfile version 1.2.2 and potentially earlier versions.
5
Where does CVE-2025-52194 occur in the code?
CVE-2025-52194 occurs in the ircam_read_header function at src/ircam.c:164.