CVE-2014-9496 on Ubuntu 12.04 LTS (precise) - low.
Description:
The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.