https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:27:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341700 EUVD-2026-341700 https://cve.radiocsirt.org/vuln/euvd-2026-341700 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29022 <p>dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.</p> <p>dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-29022 https://cve.radiocsirt.org/vuln/ghsa-38j9-4vcr-j8qh <p>dr_libs version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.</p> <p>dr_libs version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.</p> https://cve.radiocsirt.org/vuln/ghsa-38j9-4vcr-j8qh https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-29022 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: octave-ltfat, Ubuntu:16.04:LTS: qtads, Ubuntu:18.04:LTS: octave-ltfat, Ubuntu:18.04:LTS: qtads, Ubuntu:20.04:LTS: faudio, Ubuntu:20.04:LTS: octave-ltfat, Ubuntu:20.04:LTS: qtads, Ubuntu:22.04:LTS: faudio, Ubuntu:22.04:LTS: octave-ltfat, Ubuntu:22.04:LTS: qtads and 14 more</p> <p>dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: octave-ltfat, Ubuntu:16.04:LTS: qtads, Ubuntu:18.04:LTS: octave-ltfat, Ubuntu:18.04:LTS: qtads, Ubuntu:20.04:LTS: faudio, Ubuntu:20.04:LTS: octave-ltfat, Ubuntu:20.04:LTS: qtads, Ubuntu:22.04:LTS: faudio, Ubuntu:22.04:LTS: octave-ltfat, Ubuntu:22.04:LTS: qtads and 14 more</p> <p>dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-29022