Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-32837 1 Mackron 1 Miniaudio 2026-03-19 5.5 Medium
miniaudio version 0.11.25 and earlier contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by processing crafted WAV files. Attackers can exploit improper null-termination handling in the coding history field to cause out-of-bounds reads past the allocated metadata pool, resulting in application crashes or denial of service.
CVE-2021-34184 1 Mackron 1 Miniaudio 2025-08-26 9.8 Critical
Miniaudio 0.10.35 has a Double free vulnerability that could cause a buffer overflow in ma_default_vfs_close__stdio in miniaudio.h.
CVE-2021-34185 1 Mackron 1 Miniaudio 2025-08-26 7.8 High
Miniaudio 0.10.35 has an integer-based buffer overflow caused by an out-of-bounds left shift in drwav_bytes_to_u32 in miniaudio.h
CVE-2024-41147 1 Mackron 1 Miniaudio 2025-08-26 7.7 High
An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.