mackron dr_libs dr_wav drwav__read_cue_to_metadata_obj out-of-bounds write vulnerability

Summary A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs versions: 0.14.5. A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versio...

mackron dr_libs dr_mp3 drmp3_init_internal out-of-bounds read vulnerability

Summary A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versions The...

CVE-2026-11315

A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11316

A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs versions: 0.14.5. A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

EUVD-2026-121252

A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11315

A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11315

A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11315

The dr_libs library (version 0.7.3 ) is vulnerable to an out-of-bounds read vulnerability within the dr_mp3 drmp3_init_internal functionality. A remote attacker can trigger this issue by providing a specially crafted .mp3 file , which can lead to an out-of-bounds read operation. No specific remed...

CVE-2026-11316

A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs versions: 0.14.5. A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11316

A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs versions: 0.14.5. A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11316

The dr_libs library (version 0.14.5 ) contains an out-of-bounds write vulnerability within the dr_wav drwav__read_cue_to_metadata_obj functionality. An attacker can trigger this vulnerability by providing a specially crafted .wav file . While specific impacts are not detailed beyond the out-of-bo...

EUVD-2026-121251

A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs versions: 0.14.5. A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11316: mackron dr_libs: A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs…

A out-of-bounds write vulnerability exists in the drwav drwavreadcuetometadataobj functionality of drlibs versions: 0.14.5. A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2026-11315: mackron dr_libs: A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3)

A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs versions: 0.7.3. A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability...

dr_libs-devel-20260901-1.1 on GA media (moderate)

drlibs-devel-20260901-1.1 on GA media Announcement ID: openSUSE-SU-2026:12176-1 Rating: moderate Cross-References: CVE-2026-29022 CVE-2026-32836 Affected Products: openSUSE Tumbleweed An update that solves 2 vulnerabilities can now be installed. Description: These are all security issues fixed in...

OPENSUSE-SU-2026:12176-1 dr_libs-devel-20260901-1.1 on GA media

These are all security issues fixed in the drlibs-devel-20260901-1.1 package on the GA media of openSUSE Tumbleweed...

dr_libs:dr_mp3_fuzzer: Heap-buffer-overflow in drmp3_init_internal

Project: https://github.com/mackron/drlibs.git Detailed Report: https://oss-fuzz.com/testcase?key=5395474153275392 Project: drlibs Fuzzing Engine: libFuzzer Fuzz Target: drmp3fuzzer Job Type: libfuzzerasandrlibs Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

Linux Distros Unpatched Vulnerability : CVE-2026-71261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1...

CVE-2026-71261

drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...

CVE-2026-71261: Integer Overflow or Wraparound

drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...