Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6mgc-4427-8p4x

Опубликовано: 17 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.5

Описание

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can exploit attacker-controlled mimeLength and descriptionLength fields to cause denial of service through memory exhaustion when processing FLAC streams with metadata callbacks.

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can exploit attacker-controlled mimeLength and descriptionLength fields to cause denial of service through memory exhaustion when processing FLAC streams with metadata callbacks.

EPSS

Процентиль: 2%
0.00013
Низкий

6.9 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-789

Связанные уязвимости

nvd
12 дней назад

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can exploit attacker-controlled mimeLength and descriptionLength fields to cause denial of service through memory exhaustion when processing FLAC streams with metadata callbacks.

debian
12 дней назад

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allo ...

EPSS

Процентиль: 2%
0.00013
Низкий

6.9 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-789