An integer overflow vulnerability (CVE-2026-37555, CVSS 7.5 HIGH) exists in the `ima_reader_init()` function of libsndfile, which could allow for arbitrary code execution or application crashes when processing malicious audio files. The vulnerability affects libsndfile version 1.2.2. Red Hat has issued an important security update with patched packages for multiple architectures of Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions and Extended Life Cycle support.
Red Hat Product Errata RHSA-2026:23221 - Security Advisory Issued: 2026-06-04 Updated: 2026-06-04 RHSA-2026:23221 - Security Advisory Overview Updated Packages Synopsis Important: libsndfile security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsndfile is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2463856 - CVE-2026-37555 libsndfile: integer overflow in ima_reader_init() CVEs CVE-2026-37555 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 x86_64 libsndfile-1.0.31-7.el9_2.1.i686.rpm SHA-256: 0be0aed0de963b30d1e135f58d583097a97a5038193e75e91502f1e8a0119e66 libsndfile-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: b8ebdc3cdb0a0834555de6a622bbd9475ec370354b54dd8aad56b7575e117380 libsndfile-debuginfo-1.0.31-7.el9_2.1.i686.rpm SHA-256: d431a3e28edc3a60bf38a5be4a51a84813be4d3421111312753a2bb883bbfe27 libsndfile-debuginfo-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: 7e72665032301e175821946919219e7792f1ef602d82aa9b2eb06ae2deb4c6ac libsndfile-debugsource-1.0.31-7.el9_2.1.i686.rpm SHA-256: 6a7340c3f99b1c1439f52cbafeaaed17b56b22a24e5e9163b9a7eaeb59473335 libsndfile-debugsource-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: beb203575c2ac623bdd17b3ee88c7f5ff5de18a82822d6440c96fe4d9e5e2803 libsndfile-utils-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: d5d46bbbf144c81ee47bdbdf3274ae66962adb857361436065be32b5805e25ae libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.i686.rpm SHA-256: f070593ec9e393e04e04779c771fd843fd28d2d770ac398598f61ad8c81be7d7 libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: c636729884559779421feafa0d0e63edbf8f7ef4c148df16e856cb3bf0bf530f Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 ppc64le libsndfile-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: 33f527740a9ce118b13c97869e29d0cb77250cb89b9c443207fb8a3ae4c82f36 libsndfile-debuginfo-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: c6a26e42db74f5e1a4eb164918b214c560819c8bf3b5b12143ee50b45a6fba93 libsndfile-debugsource-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: f55656bda1ba8850bbc32619d84953c52934b3924bfef9777731bd4f0e6989bb libsndfile-utils-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: 5d39439d8b59fe4481165a6744ff0d670d2ca4de917df0480c5139919ca8122f libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: 03ff2be3d42d2b553a2d4d9e943abe0ffc7e073ff022e1a1f344df4f8a96e02e Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 x86_64 libsndfile-1.0.31-7.el9_2.1.i686.rpm SHA-256: 0be0aed0de963b30d1e135f58d583097a97a5038193e75e91502f1e8a0119e66 libsndfile-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: b8ebdc3cdb0a0834555de6a622bbd9475ec370354b54dd8aad56b7575e117380 libsndfile-debuginfo-1.0.31-7.el9_2.1.i686.rpm SHA-256: d431a3e28edc3a60bf38a5be4a51a84813be4d3421111312753a2bb883bbfe27 libsndfile-debuginfo-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: 7e72665032301e175821946919219e7792f1ef602d82aa9b2eb06ae2deb4c6ac libsndfile-debugsource-1.0.31-7.el9_2.1.i686.rpm SHA-256: 6a7340c3f99b1c1439f52cbafeaaed17b56b22a24e5e9163b9a7eaeb59473335 libsndfile-debugsource-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: beb203575c2ac623bdd17b3ee88c7f5ff5de18a82822d6440c96fe4d9e5e2803 libsndfile-utils-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: d5d46bbbf144c81ee47bdbdf3274ae66962adb857361436065be32b5805e25ae libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.i686.rpm SHA-256: f070593ec9e393e04e04779c771fd843fd28d2d770ac398598f61ad8c81be7d7 libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: c636729884559779421feafa0d0e63edbf8f7ef4c148df16e856cb3bf0bf530f Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 aarch64 libsndfile-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: 063d9b152b0676729e9f9ae94030494f675f6672d51ce46c31510e18dae323c1 libsndfile-debuginfo-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: 13d8ff069b784cf7b10e04154a0661b5cd2f66e93326f5a0d63f8c768fc68586 libsndfile-debugsource-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: c3504b860e62b4647773a440e560acf6e2106c834ecb9ceba2b3ec4b275cb484 libsndfile-utils-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: e582676b40f12d9d5b6563233f76403d307411df6a469dd90ea6564cb38b8534 libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: d0e39ae7417ef41848510ccd42b31a1f4269e704c3d3486b70a2a4349472a49f Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 s390x libsndfile-1.0.31-7.el9_2.1.s390x.rpm SHA-256: 9f6b52f296900c677e69be4b6d2b8460a1b9e1b9895ffc7eef49fde060c8543f libsndfile-debuginfo-1.0.31-7.el9_2.1.s390x.rpm SHA-256: c9cd445c75c7b38c5ed30b3513ed0429cb85df3b3f1a10722cc44a2cc1808b50 libsndfile-debugsource-1.0.31-7.el9_2.1.s390x.rpm SHA-256: be13fd2fd4f39a6b44257e6d3e89436f01ea8eaef8cb84470d7eeff041255f8b libsndfile-utils-1.0.31-7.el9_2.1.s390x.rpm SHA-256: a2972c1b790aca5fd0558abaabd64199e7bdf1bde0aa7d58d00e8fc4b639141d libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.s390x.rpm SHA-256: 9a0fa739d5dac4495af93052942ee96446c37264bffff4e916452a06c70dad73 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 x86_64 libsndfile-1.0.31-7.el9_2.1.i686.rpm SHA-256: 0be0aed0de963b30d1e135f58d583097a97a5038193e75e91502f1e8a0119e66 libsndfile-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: b8ebdc3cdb0a0834555de6a622bbd9475ec370354b54dd8aad56b7575e117380 libsndfile-debuginfo-1.0.31-7.el9_2.1.i686.rpm SHA-256: d431a3e28edc3a60bf38a5be4a51a84813be4d3421111312753a2bb883bbfe27 libsndfile-debuginfo-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: 7e72665032301e175821946919219e7792f1ef602d82aa9b2eb06ae2deb4c6ac libsndfile-debugsource-1.0.31-7.el9_2.1.i686.rpm SHA-256: 6a7340c3f99b1c1439f52cbafeaaed17b56b22a24e5e9163b9a7eaeb59473335 libsndfile-debugsource-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: beb203575c2ac623bdd17b3ee88c7f5ff5de18a82822d6440c96fe4d9e5e2803 libsndfile-utils-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: d5d46bbbf144c81ee47bdbdf3274ae66962adb857361436065be32b5805e25ae libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.i686.rpm SHA-256: f070593ec9e393e04e04779c771fd843fd28d2d770ac398598f61ad8c81be7d7 libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.x86_64.rpm SHA-256: c636729884559779421feafa0d0e63edbf8f7ef4c148df16e856cb3bf0bf530f Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 aarch64 libsndfile-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: 063d9b152b0676729e9f9ae94030494f675f6672d51ce46c31510e18dae323c1 libsndfile-debuginfo-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: 13d8ff069b784cf7b10e04154a0661b5cd2f66e93326f5a0d63f8c768fc68586 libsndfile-debugsource-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: c3504b860e62b4647773a440e560acf6e2106c834ecb9ceba2b3ec4b275cb484 libsndfile-utils-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: e582676b40f12d9d5b6563233f76403d307411df6a469dd90ea6564cb38b8534 libsndfile-utils-debuginfo-1.0.31-7.el9_2.1.aarch64.rpm SHA-256: d0e39ae7417ef41848510ccd42b31a1f4269e704c3d3486b70a2a4349472a49f Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 SRPM libsndfile-1.0.31-7.el9_2.1.src.rpm SHA-256: fa915738bd47f9ac9cf8881b32e9ad757ae769069750e7cbddf67a685e6c20a6 ppc64le libsndfile-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: 33f527740a9ce118b13c97869e29d0cb77250cb89b9c443207fb8a3ae4c82f36 libsndfile-debuginfo-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: c6a26e42db74f5e1a4eb164918b214c560819c8bf3b5b12143ee50b45a6fba93 libsndfile-debugsource-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: f55656bda1ba8850bbc32619d84953c52934b3924bfef9777731bd4f0e6989bb libsndfile-utils-1.0.31-7.el9_2.1.ppc64le.rpm SHA-256: 5d39439d8b59fe4481165a6744ff0d670d2ca4de917df0480c5139919ca8122f libsndfile-uti