CVE-2026-122329

A flaw was found in SDLmixer. The library's Audio Interchange File Format AIFF decoder miscalculates memory offsets when decompressing audio samples, resulting in a stack-based buffer overflow. An attacker could exploit this vulnerability by supplying a specially crafted audio file, potentially...

CVE-2026-122329

The SDL_mixer library (versions 3.1.2 through 3.2.4 ) is vulnerable to a stack-based buffer overflow within the FetchXLaw() function in src/decoder_aiff.c. This flaw stems from miscalculated output offsets during the expansion of A-law or mu-law samples. An attacker can trigger this by providing ...