An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2alaw_array in alaw.c that will lead to a denial of service...

References

• advisory https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html
• patch https://github.com/erikd/libsndfile/issues/429
• web https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
• web https://usn.ubuntu.com/4013-1/