{"metadata": {"vulnerability": "cve-2026-109828", "count": 22, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 15}}, "data": [{"timestamp": "2026-10-13T00:00:00Z", "date_only": false, "value": "2026-10-13T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-109828", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-13T02:00:00Z", "date_only": false, "value": "2026-10-13T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-109828", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-13T04:58:48.993Z", "date_only": false, "value": "2026-10-13T04:58:48.993Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109828", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T07:03:54Z", "date_only": false, "value": "2026-10-13T07:03:54.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-109828", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T17:00:15.758Z", "date_only": false, "value": "2026-10-13T17:00:15.758Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109828", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T17:00:15.758Z", "date_only": false, "value": "2026-10-13T17:00:15.758Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-109828", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:04:17.756Z", "date_only": false, "value": "2026-10-13T17:04:17.756922Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434683052438366", "record": "CVE-2026-109828", "field": "creation_timestamp", "uuid": "3e19894f-b956-460e-b7c5-fdf49aeaa6eb", "content": "CVE-2026-109828 libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109828https://vuldb.com/vuln/417466https://vuldb.com/vuln/417466/ctihttps://vuldb.com/cve/CVE-2026-109828https://vuldb.com/submit/1002209https://github.com/libsndfile/libsndfile/issues/1169https://github.com/libsndfile/libsndfile/#CVE_2026_109828#bot", "url": "https://infosec.exchange/users/cve/statuses/117434683052438366"}, {"timestamp": "2026-10-13T17:15:52.546Z", "date_only": false, "value": "2026-10-13T17:15:52.546585Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109828", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T17:15:52.546Z", "date_only": false, "value": "2026-10-13T17:15:52.546585Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109828", "record": "FKIE_CVE-2026-109828", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T17:16:03.306Z", "date_only": false, "value": "2026-10-13T17:16:03.306Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109828", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:16:03.306Z", "date_only": false, "value": "2026-10-13T17:16:03.306Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109828", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T17:17:31Z", "date_only": false, "value": "2026-10-13T17:17:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F48F-2357-X2FH", "record": "GHSA-F48F-2357-X2FH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T17:17:31.893Z", "date_only": false, "value": "2026-10-13T17:17:31.893", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109828", "record": "FKIE_CVE-2026-109828", "field": "published"}, {"timestamp": "2026-10-13T18:23:13.886Z", "date_only": false, "value": "2026-10-13T18:23:13.886463Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dbr6vjupqahj2", "record": "CVE-2026-109828", "field": "creation_timestamp", "uuid": "7304cc7b-31c0-467c-a75e-cf4e49dcae84", "content": "CVE-2026-109828 - libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable\nCVE ID : CVE-2026-109828\n \n Published : Oct. 13, 2026, 5 p.m. | 24\u00a0minutes ago\n \n Description : A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/dbr6vjupqahj2"}, {"timestamp": "2026-10-13T18:30:53Z", "date_only": false, "value": "2026-10-13T18:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F48F-2357-X2FH", "record": "GHSA-F48F-2357-X2FH", "field": "published"}, {"timestamp": "2026-10-13T18:30:53Z", "date_only": false, "value": "2026-10-13T18:30:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F48F-2357-X2FH", "record": "GHSA-F48F-2357-X2FH", "field": "modified"}, {"timestamp": "2026-10-13T19:26:24.643Z", "date_only": false, "value": "2026-10-13T19:26:24.643", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109828", "record": "FKIE_CVE-2026-109828", "field": "lastModified"}, {"timestamp": "2026-10-15T01:09:20Z", "date_only": false, "value": "2026-10-15T01:09:20.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109828", "record": "MSRC_CVE-2026-109828", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T01:09:20Z", "date_only": false, "value": "2026-10-15T01:09:20.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109828", "record": "MSRC_CVE-2026-109828", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-15T01:09:20Z", "date_only": false, "value": "2026-10-15T01:09:20.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109828", "record": "MSRC_CVE-2026-109828", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T01:09:20Z", "date_only": false, "value": "2026-10-15T01:09:20.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109828", "record": "MSRC_CVE-2026-109828", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T07:01:21.004Z", "date_only": false, "value": "2026-10-15T07:01:21.004Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2026-109828", "record": "MSRC_CVE-2026-109828", "field": "document.tracking.generator.date"}]}