Erik De Castro Lopo · Libsndfile · CVE-2015-7805
**Name of the Vulnerable Software and Affected Versions**
libsndfile version 1.0.25
**Description**
The issue is related to a heap-based buffer overflow that can be triggered by the headindex value in the header of an AIFF file. This allows remote attackers to have an unspecified impact.
**Recommendations**
For libsndfile version 1.0.25, consider updating to a newer version that addresses this issue. As a temporary workaround, restrict the processing of AIFF files with potentially malicious headindex values in the header. Avoid using the `headindex` value in the AIFF file header until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.