CVE-2024-41147CWE-122

An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21

High · published March 4, 2025

CVSS v3.1
7.7
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00726 · 53.6th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2025-03-04T17:21Z
EPSS history
Timeline
  • 04 MAR 17:21Z
    An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21
    cvelistv5