Vendors / mackron Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now mackron records in CISA KEV No mackron vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 56
miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by pr…
CVSS 4.0 MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00239 · Published 2026-03-17 · Fixed CWE-170
Priority MEDIUM 44
An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00726 · Published 2025-03-04 · No fix listed CWE-122
Priority MEDIUM 44
Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01146 · Published 2021-06-25 · No fix listed CWE-415
Priority LOW 35
Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.h
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00682 · Published 2021-06-25 · No fix listed CWE-120
Open these records in search → All records by CVSS severity
2 2 4 0 0
THREATIST.IORead the docs