SUSE-SU-2026:5162-1: Security update for sbc

Q: Which systems and packages are identified as affected by this update?

The advisory lists SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security on x86_64 and the sbc package family: sbc, libsbc1, sbc-devel, and their associated debuginfo and debugsource packages.

Q: What must an attacker provide to trigger the issue?

The issue is triggered through a crafted SBC audio frame. The provided information does not state whether exploitation requires local access, network delivery, or user interaction.

Q: What is the impact of the flaw?

CVE-2026-16473 is a heap out-of-bounds read in SBC audio-frame handling. The advisory rates the update medium severity with a score of 4.

Published Nov 10, 2026

Updated

This update for sbc fixes the following issue:

- CVE-2026-16473: heap out-of-bounds read via crafted SBC audio frame (bsc#1272367).

Other sources

This update for sbc fixes the following issue: CVE-2026-16473: heap out-of-bounds read via crafted SBC audio frame (bsc#1272367).

— SUSE

Affected Software

7 affected componentsFixes available

suse/sbc<1.0-8.3.1

1.0-8.3.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64)

Any of the following

suse/libsbc1<1.0-8.3.1

1.0-8.3.1

suse/sbc-debuginfo<1.0-8.3.1

1.0-8.3.1

suse/libsbc1-debuginfo<1.0-8.3.1

1.0-8.3.1

suse/sbc-debugsource<1.0-8.3.1

1.0-8.3.1

suse/sbc-devel<1.0-8.3.1

1.0-8.3.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/sbc to a version that resolves this vulnerability.
Fixed in 1.0-8.3.1
Upgrade
Upgrade suse/libsbc1 to a version that resolves this vulnerability.
Fixed in 1.0-8.3.1
Upgrade
Upgrade suse/sbc-debuginfo to a version that resolves this vulnerability.
Fixed in 1.0-8.3.1
Upgrade
Upgrade suse/libsbc1-debuginfo to a version that resolves this vulnerability.
Fixed in 1.0-8.3.1
Upgrade
Upgrade suse/sbc-debugsource to a version that resolves this vulnerability.
Fixed in 1.0-8.3.1
Upgrade
Upgrade suse/sbc-devel to a version that resolves this vulnerability.
Fixed in 1.0-8.3.1
Upgrade
Upgrade sbc to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-5162

Event History

Nov 10, 2026

Advisory Published

via OSV·09:41 AM

Data Sourced

via OSV·09:41 AM

DescriptionAffected Software

Data Sourced

via SUSE·09:41 AM

RemedyDescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-16473

Frequently Asked Questions

Which systems and packages are identified as affected by this update?

The advisory lists SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security on x86_64 and the sbc package family: sbc, libsbc1, sbc-devel, and their associated debuginfo and debugsource packages.

What must an attacker provide to trigger the issue?

The issue is triggered through a crafted SBC audio frame. The provided information does not state whether exploitation requires local access, network delivery, or user interaction.

What is the impact of the flaw?

CVE-2026-16473 is a heap out-of-bounds read in SBC audio-frame handling. The advisory rates the update medium severity with a score of 4.

SUSE-SU-2026:5162-1: Security update for sbc

Other sources

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems and packages are identified as affected by this update?

What must an attacker provide to trigger the issue?

What is the impact of the flaw?

Company

Resources

Contact

Frequently Asked Questions

Which systems and packages are identified as affected by this update?

What must an attacker provide to trigger the issue?

What is the impact of the flaw?