Unknown · Libsndfile · CVE-2022-33064
**Name of the Vulnerable Software and Affected Versions**
Libsndfile version 1.1.0
**Description**
An off-by-one error in the `wav read header` function in `src/wav.c` results in a write out of bounds, allowing an attacker to execute arbitrary code, cause a Denial of Service, or have other unspecified impacts.
**Recommendations**
For Libsndfile version 1.1.0, consider disabling the `wav read header` function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.