libsndfile Buffer Overflow Vulnerability in IRCAM File Processing

A buffer overflow vulnerability has been identified in libsndfile versions through 1.2.2, when handling malformed IRCAM audio files. The issue arises in the 'ircam_read_header' function, specifically during sample rate processing, leading to memory corruption and potential code execution.

Impact

Exploitation of this vulnerability causes a buffer overflow, leading to memory corruption and the possibility of arbitrary code execution.

Reproduction

The vulnerability can be reproduced by compiling libsndfile with AddressSanitizer (ASAN) instrumentation, and then running the library with a specially crafted IRCAM file that triggers the buffer overflow. The 'ircam_read_header' function will crash with an illegal instruction error, indicating the memory corruption caused by the malformed file.