mackron dr_libs up to 0.14.4 WAV File Parser dr_wav.h drwav__read_smpl_to_metadata_obj heap-based overflow

Summaryinfo

A vulnerability identified as critical has been detected in mackron dr_libs up to 0.14.4. This vulnerability affects the function drwav__read_smpl_to_metadata_obj of the file dr_wav.h of the component WAV File Parser. This manipulation causes heap-based overflow. This vulnerability is tracked as CVE-2026-29022. The attack is possible to be carried out remotely. No exploit exists. Applying a patch is the recommended action to fix this issue.

Detailsinfo

A vulnerability has been found in mackron dr_libs up to 0.14.4 and classified as critical. Affected by this vulnerability is the function drwav__read_smpl_to_metadata_obj of the file dr_wav.h of the component WAV File Parser. The manipulation with an unknown input leads to a heap-based overflow vulnerability. The CWE definition for the vulnerability is CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.

The weakness was disclosed by Ana Kapulica as 296. The advisory is shared at github.com. This vulnerability is known as CVE-2026-29022 since 03/03/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 301145 (Linux Distros Unpatched Vulnerability : CVE-2026-29022), which helps to determine the existence of the flaw in a target environment.

Applying the patch 8a7258cc66b49387ad58cc5b81568982a3560d49 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (301145). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• mackron

Name

• dr_libs

Version

• 0.14.0
• 0.14.1
• 0.14.2
• 0.14.3
• 0.14.4

License

• open-source

Website

• Product: https://github.com/mackron/dr_libs/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion