CVE-2026-88372: Integer Overflow
Published Sep 24, 2026
·Updated
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4readheader() when parsing crafted MAT4 (MATLAB v4) files.
Affected Software
1 affected component
libsndfile libsndfile=1.2.2
Event History
Sep 24, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are exposed?
Deployments using libsndfile 1.2.2 are exposed when they parse MAT4 (MATLAB v4) files.
2
What does an attacker need to trigger the issue?
An attacker needs to supply a crafted MAT4 file that reaches the mat4_read_header() parsing function.