Integer overflow in libsndfile 1.0.18 as used in Winamp and other products allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file leading to a heap-based buffer overflow.