https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T16:29:03.142035+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-29022 CVE-2026-29022 — mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File 2026-10-02T16:29:03.144105+00:00

Affected: mackron dr_libs dr_wav.h

dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.

 https://vulnerability.circl.lu/vuln/usn-8612-1 USN-8612-1 — roc-toolkit vulnerability 2026-10-02T16:29:03.144230+00:00

Affected: Ubuntu:26.04:LTS: roc-toolkit

It was discovered that Roc Toolkit incorrectly handled WAV files with a malformed "smpl" chunk. An attacker could use this issue to cause Roc Toolkit to crash, resulting in a denial of service, or possibly execute arbitrary code.