Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-32836

Опубликовано: 17 мар. 2026
Источник: nvd
EPSS Низкий

Описание

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can exploit attacker-controlled mimeLength and descriptionLength fields to cause denial of service through memory exhaustion when processing FLAC streams with metadata callbacks.

EPSS

Процентиль: 2%
0.00013
Низкий

Дефекты

CWE-789

Связанные уязвимости

debian
12 дней назад

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allo ...

CVSS3: 5.5
github
12 дней назад

dr_libs version 0.13.3 and earlier contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can exploit attacker-controlled mimeLength and descriptionLength fields to cause denial of service through memory exhaustion when processing FLAC streams with metadata callbacks.

EPSS

Процентиль: 2%
0.00013
Низкий

Дефекты

CWE-789