An issue was discovered in libsndfile 1.0.28. There is a OOB read error in sf_write_int in sndfile.c, which will lead to a denial of service.
References:
https://github.com/erikd/libsndfile/issues/427
Statement:
This issue did not affect the versions of libsndfile as shipped with Red Hat Enterprise Linux 6. This issue affects the versions of libsndfile as shipped with Red Hat Enterprise Linux 7.