Skip to content
OpenAdvisories
High · 8.8 CVE-2026-11316 EUVD-2026-121251GHSA-pwr2-xrm6-8hxc

A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5). A s…

Published Nov 10, 2026 · Assigned by talos

Description

A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5). A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
mackron dr_libs 0.14.5 —

References