CVE-2021-3246

Name of the Vulnerable Software and Affected Versions libsndfile version 1.0.30

Description The issue is caused by a heap buffer overflow in the msadpcm decode block function of the libsndfile library. This can be exploited by a remote attacker using a specially crafted WAV file, potentially allowing the execution of arbitrary code.

Recommendations For libsndfile version 1.0.30, consider updating to a newer version that addresses the heap buffer overflow vulnerability in the msadpcm decode block function. As a temporary workaround, restrict the use of the msadpcm decode block function when processing untrusted WAV files to minimize the risk of exploitation.