Approved changes feed: RSS · Atom
cpe:2.3:a:mackron:miniaudio:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Mackron (23316756-7646-581b-8422-428d850abfa3) |
|---|---|
| Product | Miniaudio (512f3307-f290-548a-a403-32ad90a57c4d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/mackron/miniaudio |
purl2cpe | 2026-06-01 10:14:40.631619 |
pkg:rpm/fedora/miniaudio |
purl2cpe | 2026-06-01 10:14:40.631622 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-32837 |
vulnerable | 2026-06-08 07:57:18.181624 |
mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing
MEDIUM (4)
miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by processing crafted WAV files. Attackers can exploit improper null-termination handling in the coding history field to cause out-of-bounds reads past the allocated metadata pool, resulting in application crashes or denial of service.
Published: 2026-03-17T19:10:06.080Z
Updated: 2026-07-14T18:39:58.052Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.