9 matches found
PT-2026-117602
These are all security issues fixed in the dr libs-devel-20260901-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-68134
Name of the Vulnerable Software and Affected Versions dr libs dr wav.h affected versions not specified Description An integer overflow exists in W64 CUE chunk metadata parsing. In the drwav metadata process chunk function, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to...
SUSE CVE-2026-32836
drlibs drflac.h version 0.13.3 and earlier fixed in commits fefced4, 4f5a4cd, and 663239a contain an uncontrolled memory allocation vulnerability in drflacreadanddecodemetadata that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can...
dr_libs security vulnerabilities
drlibs is an audio decoding library developed by David Reid as a personal project in C/C++. Versions of drlibs prior to 0.13.3 contain security vulnerabilities. These vulnerabilities stem from the drflacreadanddecodemetadata function, which involves uncontrolled memory allocation. This could allo...
PT-2026-25931
Name of the Vulnerable Software and Affected Versions dr libs versions 0.13.3 and earlier Description The software contains an uncontrolled memory allocation issue in the drflac read and decode metadata function. This allows attackers to cause a denial of service by triggering excessive memory...
Fedora 42 : dr_libs (2026-2350c6fd8c)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2350c6fd8c advisory. Backport the fix for CVE-2026-29022 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has no...
UBUNTU-CVE-2025-14369
drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...
CVE-2025-14369
drflac, an audio decoder within the drlibs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool...
