An integer overflow vulnerability (CVE-2026-37555, CVSS 7.5 HIGH) exists in the `ima_reader_init()` function of libsndfile, which could allow for arbitrary code execution or a denial of service. The vulnerability affects libsndfile version 1.2.2. Red Hat has released an important security update for libsndfile to address this issue in Red Hat Enterprise Linux 9 and its associated streams and architectures.
Red Hat Product Errata RHSA-2026:19610 - Security Advisory Issued: 2026-05-20 Updated: 2026-05-20 RHSA-2026:19610 - Security Advisory Overview Updated Packages Synopsis Important: libsndfile security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libsndfile is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description libsndfile is a C library for reading and writing files containing sampled sound, such as AIFF, AU, or WAV. Security Fix(es): libsndfile: integer overflow in ima_reader_init() (CVE-2026-37555) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2463856 - CVE-2026-37555 libsndfile: integer overflow in ima_reader_init() CVEs CVE-2026-37555 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 x86_64 libsndfile-1.0.31-9.el9_8.1.i686.rpm SHA-256: 2d1f6105698c906efa73095ffdfb21546dd694df97131df940ef9eac8e09e552 libsndfile-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: eda3a16243dea68de6bcf06b610b06bed3e411281bc05bfc655a7f4de3fc059d libsndfile-debuginfo-1.0.31-9.el9_8.1.i686.rpm SHA-256: 1b34524e339ee9602c06c1d50ffa4ee4a45b9f3ed7f16cc1b32808b3644d1d28 libsndfile-debuginfo-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: 07d722c5ca041bf1e05030bde62c78c54a979909d94ff281df75552514d35bcc libsndfile-debugsource-1.0.31-9.el9_8.1.i686.rpm SHA-256: e9ed93dbb95a9938e23f3fbc561da01e29ac894dca0cdfdf3307f4705e60cc0d libsndfile-debugsource-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: 145a7767ceab17fd1aa7d8ddce982027d53abda12f55f3b378a50c30ab83d52b libsndfile-utils-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: ee04a194a42e301abaefa4bda2b58e34b8bfaa1e159a898d7fc61a6fd7aac6a5 libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.i686.rpm SHA-256: 9e492f584caa8f81d19b1a96e14e034a2c324b00d27030bda475fbcc622ce35d libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: 1bee7ab99d7bd993185a8969a700884244cfb5693aa1903bdaeca6b8aa55c6ee Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 x86_64 libsndfile-1.0.31-9.el9_8.1.i686.rpm SHA-256: 2d1f6105698c906efa73095ffdfb21546dd694df97131df940ef9eac8e09e552 libsndfile-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: eda3a16243dea68de6bcf06b610b06bed3e411281bc05bfc655a7f4de3fc059d libsndfile-debuginfo-1.0.31-9.el9_8.1.i686.rpm SHA-256: 1b34524e339ee9602c06c1d50ffa4ee4a45b9f3ed7f16cc1b32808b3644d1d28 libsndfile-debuginfo-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: 07d722c5ca041bf1e05030bde62c78c54a979909d94ff281df75552514d35bcc libsndfile-debugsource-1.0.31-9.el9_8.1.i686.rpm SHA-256: e9ed93dbb95a9938e23f3fbc561da01e29ac894dca0cdfdf3307f4705e60cc0d libsndfile-debugsource-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: 145a7767ceab17fd1aa7d8ddce982027d53abda12f55f3b378a50c30ab83d52b libsndfile-utils-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: ee04a194a42e301abaefa4bda2b58e34b8bfaa1e159a898d7fc61a6fd7aac6a5 libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.i686.rpm SHA-256: 9e492f584caa8f81d19b1a96e14e034a2c324b00d27030bda475fbcc622ce35d libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.x86_64.rpm SHA-256: 1bee7ab99d7bd993185a8969a700884244cfb5693aa1903bdaeca6b8aa55c6ee Red Hat Enterprise Linux for IBM z Systems 9 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 s390x libsndfile-1.0.31-9.el9_8.1.s390x.rpm SHA-256: a86b2646bc397599322f41eb4cb1b0171e664091fc7ade7fb316529ec710f251 libsndfile-debuginfo-1.0.31-9.el9_8.1.s390x.rpm SHA-256: c445313b0d8084297366554243c8ef77401357fb8a62f39c2c0e7e89dad1ac05 libsndfile-debugsource-1.0.31-9.el9_8.1.s390x.rpm SHA-256: afa10103493ce935c726c0f0fe99e8e73003a1d8e1c4b01091677a45ebe8e577 libsndfile-utils-1.0.31-9.el9_8.1.s390x.rpm SHA-256: d2696d8a6b8fd5b1d28e1028e7ee598b5854e442d2a49b826ba827d1ba52ebde libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.s390x.rpm SHA-256: 304d5f5e9f71952a5ddd0320a76912554a2a7c30ac60810c00d381c1a3781911 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 s390x libsndfile-1.0.31-9.el9_8.1.s390x.rpm SHA-256: a86b2646bc397599322f41eb4cb1b0171e664091fc7ade7fb316529ec710f251 libsndfile-debuginfo-1.0.31-9.el9_8.1.s390x.rpm SHA-256: c445313b0d8084297366554243c8ef77401357fb8a62f39c2c0e7e89dad1ac05 libsndfile-debugsource-1.0.31-9.el9_8.1.s390x.rpm SHA-256: afa10103493ce935c726c0f0fe99e8e73003a1d8e1c4b01091677a45ebe8e577 libsndfile-utils-1.0.31-9.el9_8.1.s390x.rpm SHA-256: d2696d8a6b8fd5b1d28e1028e7ee598b5854e442d2a49b826ba827d1ba52ebde libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.s390x.rpm SHA-256: 304d5f5e9f71952a5ddd0320a76912554a2a7c30ac60810c00d381c1a3781911 Red Hat Enterprise Linux for Power, little endian 9 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 ppc64le libsndfile-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: be4c8950fff686150e90f6633b0000fe5bf242bd7c022954d77651391f36cd14 libsndfile-debuginfo-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 1921950124fe6768a3968cfdc094193b84daccfa175a4a80d5908a81ea27b74e libsndfile-debugsource-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 59604e226a1af52e67e37ac36cbefcb3252c2221ccb356e07db8be0267fe25f3 libsndfile-utils-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 174d6d80bf8581c5541b6601250f4c66eb61fde01f00e87747318db988e12e27 libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 930bf54499151b09fcc6990ac1977323e0eddcf65919f428347b5b2eb3f64831 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 ppc64le libsndfile-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: be4c8950fff686150e90f6633b0000fe5bf242bd7c022954d77651391f36cd14 libsndfile-debuginfo-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 1921950124fe6768a3968cfdc094193b84daccfa175a4a80d5908a81ea27b74e libsndfile-debugsource-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 59604e226a1af52e67e37ac36cbefcb3252c2221ccb356e07db8be0267fe25f3 libsndfile-utils-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 174d6d80bf8581c5541b6601250f4c66eb61fde01f00e87747318db988e12e27 libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.ppc64le.rpm SHA-256: 930bf54499151b09fcc6990ac1977323e0eddcf65919f428347b5b2eb3f64831 Red Hat Enterprise Linux for ARM 64 9 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 aarch64 libsndfile-1.0.31-9.el9_8.1.aarch64.rpm SHA-256: 7cb9c1a8c729b36ddb880bd84e15d52bda570829968e4ca07aa5f8cfa768f2ca libsndfile-debuginfo-1.0.31-9.el9_8.1.aarch64.rpm SHA-256: 637f7aec8910ec9fa7aa023c525f8f0c88f0076100d453ac794dba48041bdd17 libsndfile-debugsource-1.0.31-9.el9_8.1.aarch64.rpm SHA-256: 4714374545a252bd52fdde0cb72faf041202130e59bbdd8bc8968ef4f73fd91c libsndfile-utils-1.0.31-9.el9_8.1.aarch64.rpm SHA-256: c0ad662cb1a8ee09138b880204bc69aac1d7f7367fcf79d49f43ce79406a75d7 libsndfile-utils-debuginfo-1.0.31-9.el9_8.1.aarch64.rpm SHA-256: 38e9f1859359a9809929423a8a5843dbd8fe549890673efae987c7ba81b8d7f2 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM libsndfile-1.0.31-9.el9_8.1.src.rpm SHA-256: ae126587ab40c119762bb855a4193586b156f10a392eb14e2d93808b09802361 aarch64 libsndfile-1.0.31-9.el9_8.1.aarch64.rpm SHA-256: 7cb9c1a8