An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to mishandling of the NAN and INFINITY floating-point values.Referenceshttps://github.com/erikd/libsndfile/issues/317https://lists.debian.org/debian-lts-announce/2018/12/msg00016.htmlhttps://usn.ubuntu.com/4013-1/https://security.gentoo.org/glsa/202007-65https://lists.debian.org/debian-lts-announce/2020/10/msg00030.html
