CVE-2026-29022CWE-122

mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File

Medium · published March 3, 2026

CVSS v4.0
6.8
EPSS
0%
Percentile
14.7
In the wild
Unconfirmed
What it is

dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00244 · 14.7th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-03-03T19:49Z
EPSS history
Timeline
  • 03 MAR 19:49Z
    mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File
    cvelistv5