CVE-2024-50613 - libsndfile/libsndfile
libsndfile through 1.2.2 has a reachable assertion, that may lead to application exit, in mpeg_l3_encode.c mpeg_l3_encoder_close.
Evidence
- Reviewer change request addressed with full revision
- Upstream merged after rebase
History
- 2026-10-26: submitted - PR opened
- 2026-10-27: needs-rework - Reviewer requested finite-value clamping
- 2026-10-27: merged - Merged upstream