Approved changes feed: RSS · Atom

cpe:2.3:a:jarikomppa:soloud:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJarikomppa (1d8f7457-d12a-58ef-b834-c7f98e0f01a2)
ProductSoloud (30a9ac4e-25f1-5fa0-8f41-d5922cd9452e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jarikomppa/soloud purl2cpe 2026-06-01 10:18:12.344439

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4009 vulnerable 2026-06-08 08:05:12.490967 jarikomppa soloud WAV File dr_wav.h drwav_read_pcm_frames_s16__msadpcm out-of-bounds
LOW (3.3)
A vulnerability has been found in jarikomppa soloud up to 20200207. Impacted is the function drwav_read_pcm_frames_s16__msadpcm in the library src/audiosource/wav/dr_wav.h of the component WAV File Parser. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. Upgrading to version 20200207 is recommended to address this issue. It is recommended to upgrade the affected component. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-03-12T07:02:08.275Z
Updated: 2026-03-12T14:05:35.620Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3394 vulnerable 2026-06-08 08:01:18.555399 jarikomppa soloud WAV File soloud_wav.cpp loadwav memory corruption
LOW (3.3)
A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-03-01T12:32:09.675Z
Updated: 2026-03-02T18:12:02.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3393 vulnerable 2026-06-08 08:01:18.554145 jarikomppa soloud Audio File soloud_wav.cpp loadflac heap-based overflow
LOW (3.3)
A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac of the file src/audiosource/wav/soloud_wav.cpp of the component Audio File Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-03-01T12:02:09.072Z
Updated: 2026-03-02T18:15:50.546Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.