OESA-2025-2573
- Source
- https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2573
- Import Source
- https://repo.openeuler.org/security/data/osv/OESA-2025-2573.json
- JSON Data
- https://api.osv.dev/v1/vulns/OESA-2025-2573
- Upstream
- Published
- 2025-10-31T11:09:40Z
- Modified
- 2026-08-18T01:19:16Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- libsndfile security update
- Details
-
Libsndfile is a C library for reading and writing files containing sampled sound such as MS Windows WAV and the Apple/SGI AIFF format through one standard library interface.
Security Fix(es):
libsndfile through 1.2.2 has an ogg_vorbis.c vorbis_analysis_wrote out-of-bounds read.(CVE-2024-50612)
- Database specific
{ "severity": "Medium" }- References
Affected packages
openEuler:22.03-LTS-SP4 / libsndfile
Package
- Name
- libsndfile
- Purl
- pkg:rpm/openEuler/libsndfile&distro=openEuler-22.03-LTS-SP4
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1.0.31-5.oe2203sp4
Ecosystem specific
{
"aarch64": [
"libsndfile-1.0.31-5.oe2203sp4.aarch64.rpm",
"libsndfile-debuginfo-1.0.31-5.oe2203sp4.aarch64.rpm",
"libsndfile-debugsource-1.0.31-5.oe2203sp4.aarch64.rpm",
"libsndfile-devel-1.0.31-5.oe2203sp4.aarch64.rpm",
"libsndfile-utils-1.0.31-5.oe2203sp4.aarch64.rpm"
],
"noarch": [
"libsndfile-utils-help-1.0.31-5.oe2203sp4.noarch.rpm"
],
"src": [
"libsndfile-1.0.31-5.oe2203sp4.src.rpm"
],
"x86_64": [
"libsndfile-1.0.31-5.oe2203sp4.x86_64.rpm",
"libsndfile-debuginfo-1.0.31-5.oe2203sp4.x86_64.rpm",
"libsndfile-debugsource-1.0.31-5.oe2203sp4.x86_64.rpm",
"libsndfile-devel-1.0.31-5.oe2203sp4.x86_64.rpm",
"libsndfile-utils-1.0.31-5.oe2203sp4.x86_64.rpm"
]
}