libsndfile 1.2.2 contains an integer overflow identified in the mat4_read_header() routine that parses MATLAB v4 (MAT) files. A crafted MAT4 file can cause the routine to compute a size value that exceeds the limits of a native integer, leading to an out‑of‑bounds buffer operation. If an application that uses libsndfile processes an attacker supplied MATLAB file, the overflow may corrupt memory, potentially crashing the application or allowing an attacker to execute arbitrary code. The CVE does not explicitly state the result, but integer overflows in file parsers are a common source of denial‑of‑service or code‑execution vulnerabilities.

Any installation that relies on libsndfile 1.2.2 is affected. This includes the library itself and applications that embed or link with it, such as media players, audio editors, and other software that handles audio or MATLAB files. The vendor information is not explicitly provided, but the open‑source libsndfile community maintains the 1.2.2 release.

The CVSS score for this issue is 7.5, indicating medium to high severity. The EPSS score is not available, so current exploitation probability cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires the attacker to supply a specially crafted MAT4 file that triggers the overflow; therefore, the attack vector is primarily local file manipulation, although an application that downloads or accepts untrusted MATLAB files could also be exposed. No public proof‑of‑concept or exploits are referenced, but the potential for memory corruption warrants caution.