CVE-2018-19661
An issue was discovered in libsndfile 1.0.28. There is a buffer over-read in the function i2ulaw_array in ulaw.c that will lead to a denial of service.
Date published : 2018-11-29
https://github.com/erikd/libsndfile/issues/429
https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html