00

The short answer

  • WAV is an audio container that stores an audio stream and other data chunks within RIFF, with playback compatibility and compression determined by the actual codec.
  • On Windows or Mac, open the file in an audio player that supports its codec. Audacity documents 16-bit PCM WAV playback on both platforms, while many players cannot play 32-bit float WAV. On a phone, check the player’s supported WAV codecs before choosing it; the extension alone does not establish compatibility. If playback fails, inspect the encoding and consider exporting a copy as 16-bit PCM with an audio tool that can read the original. See [Audacity’s format guidance](https://manual.audacityteam.org/man/export_formats_supported_by_audacity.html).
  • A WAV extension or recognizable RIFF/WAVE header does not prove safety. CVE-2026-37555 describes an integer overflow in the IMA ADPCM WAV path of libsndfile 1.2.2 that can cause a heap buffer overflow or denial of service. Use updated audio software and assess unfamiliar files by their source. The medium risk rating concerns processing implementations. See the [advisory record](https://github.com/advisories/GHSA-x46m-7mvp-6fvq); [RFC 2361](https://www.rfc-editor.org/rfc/rfc2361.html) also states that codec registration does not resolve format security issues.
01

WAV files: opening, compatibility and conversion

Microsoft and IBM developed WAVE for the Windows 3.1 RIFF system. WAV and WAVE are filename extensions for this container. LPCM is common, but WAVE can also contain μ-Law, A-Law, DPCM or ADPCM. Standard RIFF/WAVE begins with RIFF, a four-byte length field and WAVE; fmt stores the audio format header and data stores audio data. See the [Library of Congress](https://www.loc.gov/preservation/digital/formats/fdd/fdd000001.shtml) and [Microsoft RIFF documentation](https://learn.microsoft.com/en-us/windows/win32/xaudio2/resource-interchange-file-format--riff-).

Keep the original

For smaller files, export a readable WAV as MP3 using an audio tool such as Audacity. PCM WAV is uncompressed and lossless; MP3 conversion sacrifices audio quality, and repeated MP3 encoding loses more quality. Keep the original and check metadata separately: WAVE may carry LIST/INFO data, and Broadcast WAVE may include bext. See [Audacity MP3 options](https://manual.audacityteam.org/man/mp3_export_options.html) and the [WAVE format description](https://www.loc.gov/preservation/digital/formats/fdd/fdd000001.shtml).

02

How to open it

On Windows or Mac, open the file in an audio player that supports its codec. Audacity documents 16-bit PCM WAV playback on both platforms, while many players cannot play 32-bit float WAV. On a phone, check the player’s supported WAV codecs before choosing it; the extension alone does not establish compatibility. If playback fails, inspect the encoding and consider exporting a copy as 16-bit PCM with an audio tool that can read the original. See [Audacity’s format guidance](https://manual.audacityteam.org/man/export_formats_supported_by_audacity.html).

I only want to read it

On Windows or Mac, open the file in an audio player that supports its codec. Audacity documents 16-bit PCM WAV playback on both platforms, while many players cannot play 32-bit float WAV. On a phone, check the player’s supported WAV codecs before choosing it; the extension alone does not establish compatibility. If playback fails, inspect the encoding and consider exporting a copy as 16-bit PCM with an audio tool that can read the original. See [Audacity’s format guidance](https://manual.audacityteam.org/man/export_formats_supported_by_audacity.html).

I need to send it to someone

For smaller files, export a readable WAV as MP3 using an audio tool such as Audacity. PCM WAV is uncompressed and lossless; MP3 conversion sacrifices audio quality, and repeated MP3 encoding loses more quality. Keep the original and check metadata separately: WAVE may carry LIST/INFO data, and Broadcast WAVE may include bext. See [Audacity MP3 options](https://manual.audacityteam.org/man/mp3_export_options.html) and the [WAVE format description](https://www.loc.gov/preservation/digital/formats/fdd/fdd000001.shtml).

03

File safety

A WAV extension or recognizable RIFF/WAVE header does not prove safety. CVE-2026-37555 describes an integer overflow in the IMA ADPCM WAV path of libsndfile 1.2.2 that can cause a heap buffer overflow or denial of service. Use updated audio software and assess unfamiliar files by their source. The medium risk rating concerns processing implementations. See the [advisory record](https://github.com/advisories/GHSA-x46m-7mvp-6fvq); [RFC 2361](https://www.rfc-editor.org/rfc/rfc2361.html) also states that codec registration does not resolve format security issues.

Stop if any of this looks off

An unknown sender, a name ending in two extensions, or contents that do not match the extension — check before you open it.

04

Converting it

For smaller files, export a readable WAV as MP3 using an audio tool such as Audacity. PCM WAV is uncompressed and lossless; MP3 conversion sacrifices audio quality, and repeated MP3 encoding loses more quality. Keep the original and check metadata separately: WAVE may carry LIST/INFO data, and Broadcast WAVE may include bext. See [Audacity MP3 options](https://manual.audacityteam.org/man/mp3_export_options.html) and the [WAVE format description](https://www.loc.gov/preservation/digital/formats/fdd/fdd000001.shtml).

Before you convert

Convert a copy, never the original, then compare quality, metadata, and layout against what you started with.

05

Common questions

What is a WAV file used for?

WAV is a RIFF-based container for audio streams and additional data chunks. It commonly holds LPCM audio, but its extension does not identify one fixed codec.

How do I open a WAVE file?

Open it with an audio player that supports the file’s actual encoding. WAV and WAVE refer to the same container; if playback fails, check the codec before assuming the file is damaged.

How do I open WAV on Windows?

Open the WAV in a Windows audio player compatible with its codec. Audacity documents 16-bit PCM WAV playback on Windows; support for other encodings depends on the player.

How do I open WAV on Mac?

Use a Mac audio player that supports the encoding inside the WAV. Audacity documents 16-bit PCM WAV playback on Mac, but many players cannot play 32-bit float WAV.

What should I do if a 32-bit float WAV will not play?

The player may not support floating-point WAV. If an audio tool can read the original, export a separate 16-bit PCM WAV copy for broader playback compatibility and retain the original.

WAV or MP3: which should I use?

Choose PCM WAV when you want uncompressed, lossless audio. Choose MP3 when a smaller file matters more than preserving all audio information; not every WAV contains PCM.

Does converting WAV to MP3 cause quality loss?

Yes, converting PCM WAV to MP3 loses audio information to reduce size. Repeated MP3 encoding causes additional quality loss, so keep the source WAV.

Are WAV files safe to open?

The extension cannot guarantee safety. WAV parsers can have vulnerabilities, including the documented IMA ADPCM issue in libsndfile 1.2.2; use updated software and consider the file’s source.

Why are PCM WAV files large?

PCM WAV stores uncompressed audio, so it does not gain the size reduction of lossy MP3 encoding. Other WAV codecs can have different compression characteristics.

Does WAV conversion preserve metadata?

Do not assume it does. WAVE may contain LIST/INFO metadata, while Broadcast WAVE may use bext; check whether the conversion retains the fields you need.

06

Related formats

Sources

WAVE Audio File Format · 美国国会图书馆格式保存资料

Resource Interchange File Format (RIFF) · Microsoft 官方开发文档

RFC 2361: WAVE and AVI Codec Registries · RFC Editor;Microsoft 作者提交的信息性 RFC

Export Formats supported by Audacity · Audacity 官方手册

MP3 Export Options · Audacity 官方手册

CVE-2026-37555 / GHSA-x46m-7mvp-6fvq · GitHub Advisory Database 收录的 NVD 漏洞记录,标注为未审核