CVE-2026-32837: Improper Null Termination

miniaudio version 0.11.25 and earlier fixed in commits 1df46ae and 1df46ae contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by processing crafted WAV files. Attackers can exploit improper null-termination...

PT-2026-25932

Name of the Vulnerable Software and Affected Versions miniaudio versions 0.11.25 and earlier Description The software contains a heap out-of-bounds read issue within the WAV BEXT metadata parser. Processing specially crafted WAV files can trigger memory access violations. Improper handling of...