Logo
vulnerabilityCVE-2022-33065
Name
CVE-2022-33065
Source
NVD ( link)Debian ( link)
Description
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libsndfile1
Patched

Vulnerability Ratings#


7.8
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.2.2
Patched
buildroot
master
1.2.2
Patched
openwrt
master
1.2.2-r3
Not Affected
openwrt
openwrt-25.12
1.2.2-r2
Not Affected
yocto
master
1.2.2
Patched
yocto
scarthgap
1.2.2
Patched

Resolved with patches#


libsndfile (buildroot:2025.02.x)

#
Title
Author
Resolve
1
mat4/mat5: fix int overflow in dataend calculation
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
2
au: avoid int overflow while calculating data_end
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
3
avr: fix int overflow in avr_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
4
sds: fix int overflow warning in sample calculations
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
5
aiff: fix int overflow when counting header elements
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
6
ircam: fix int overflow in ircam_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
7
mat4/mat5: fix int overflow when calculating blockwidth
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
8
common: fix int overflow in psf_binheader_readf()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
9
nms_adpcm: fix int overflow in signal estimate
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
10
nms_adpcm: fix int overflow in sf.frames calc
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
11
pcm: fix int overflow in pcm_init()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
12
rf64: fix int overflow in rf64_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
13
ima_adpcm: fix int overflow in ima_reader_init()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065

libsndfile (buildroot:master)

#
Title
Author
Resolve
1
mat4/mat5: fix int overflow in dataend calculation
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
2
au: avoid int overflow while calculating data_end
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
3
avr: fix int overflow in avr_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
4
sds: fix int overflow warning in sample calculations
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
5
aiff: fix int overflow when counting header elements
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
6
ircam: fix int overflow in ircam_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
7
mat4/mat5: fix int overflow when calculating blockwidth
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
8
common: fix int overflow in psf_binheader_readf()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
9
nms_adpcm: fix int overflow in signal estimate
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
10
nms_adpcm: fix int overflow in sf.frames calc
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
11
pcm: fix int overflow in pcm_init()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
12
rf64: fix int overflow in rf64_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
13
ima_adpcm: fix int overflow in ima_reader_init()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065

libsndfile1 (yocto:kirkstone)

#
Title
Author
Resolve
1
sds: fix int overflow warning in sample calculations
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
2
avr: fix int overflow in avr_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
3
ima_adpcm: fix int overflow in ima_reader_init()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
4
common: fix int overflow in psf_binheader_readf()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
5
au: avoid int overflow while calculating data_end
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
6
nms_adpcm: fix int overflow in signal estimate
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
7
pcm: fix int overflow in pcm_init()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
8
mat4/mat5: fix int overflow when calculating blockwidth
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
9
nms_adpcm: fix int overflow in sf.frames calc
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
10
mat4/mat5: fix int overflow in dataend calculation
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
11
ircam: fix int overflow in ircam_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
12
aiff: fix int overflow when counting header elements
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065
13
rf64: fix int overflow in rf64_read_header()
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065

libsndfile1 (yocto:master)

#
Title
Author
Resolve
1
mat4/mat5: fix int overflow in dataend calculation
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065

libsndfile1 (yocto:scarthgap)

#
Title
Author
Resolve
1
mat4/mat5: fix int overflow in dataend calculation
Alex Stewart <alex.stewart@ni.com>
CVE-2022-33065