Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: mackron Component: Dr Libs Clear all filters
TI-2026-25299 CVE-2026-32836 · GHSA-6mgc-4427-8p4x

mackron / dr_libs dr_flac.h Excessive Memory Allocation in PICTURE Metadata Parsing

Priority LOW 30

dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger…

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00195 Published 2026-03-17 Fixed CWE-789
TI-2026-23180 CVE-2026-29022 · GHSA-38j9-4vcr-j8qh

mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File

Priority LOW 30

dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted…

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00248 Published 2026-03-03 Fixed CWE-122