Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing
Vulnerability Description
miniaudio version 0.11.25 and earlier contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by processing crafted WAV files. Attackers can exploit improper null-termination handling in the coding history field to cause out-of-bounds reads past the allocated metadata pool, resulting in application crashes or denial of service.
CVSS Information
N/A
Vulnerability Type
不恰当的空终结符
Vulnerability Title
miniaudio 安全漏洞
Vulnerability Description
miniaudio是David Reid个人开发者的一个音频播放和采集库。 miniaudio 0.11.25及之前版本存在安全漏洞，该漏洞源于WAV BEXT元数据解析器存在堆越界读取，可能导致攻击者通过处理特制WAV文件触发内存访问违规，造成应用程序崩溃或拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A