Skip to content
OpenAdvisories
High USN-8612-1 1 CVE

roc-toolkit vulnerability

Published Jul 27, 2026 · Updated Jul 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Roc Toolkit incorrectly handled WAV files with a
malformed "smpl" chunk. An attacker could use this issue to cause Roc
Toolkit to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS roc-toolkit 0.4.0+dfsg-5ubuntu3.1

Vulnerabilities 1

  • High 7.3
    CVE-2026-29022

    mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File

    dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mism…

    mackron dr_libs dr_wav.h qtads roc-toolkit Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-29022