mackron dr_libs up to 0.13.3 PICTURE drflac__read_and_decode_metadata mimeLength/descriptionLength memory allocation

Summaryinfo

A vulnerability has been found in mackron dr_libs up to 0.13.3 and classified as problematic. This vulnerability affects the function drflac__read_and_decode_metadata of the component PICTURE Handler. The manipulation of the argument mimeLength/descriptionLength leads to memory allocation. This vulnerability is documented as CVE-2026-32836. The attack needs to be performed locally. There is not any exploit available.

Detailsinfo

A vulnerability was found in mackron dr_libs up to 0.13.3. It has been rated as problematic. This issue affects the function drflac__read_and_decode_metadata of the component PICTURE Handler. The manipulation of the argument mimeLength/descriptionLength with an unknown input leads to a memory allocation vulnerability. Using CWE to declare the problem leads to CWE-789. The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. Impacted is availability. The summary by CVE is:

dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attackers can exploit attacker-controlled mimeLength and descriptionLength fields to cause denial of service through memory exhaustion when processing FLAC streams with metadata callbacks.

The weakness was released by Ana Kapulica as 298. It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-32836 since 03/16/2026. The exploitation is known to be easy. Attacking locally is a requirement. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability scanner Nessus provides a plugin with the ID 321483 (Linux Distros Unpatched Vulnerability : CVE-2026-32836), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at Tenable (321483). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• mackron

Name

• dr_libs

Version

• 0.13.0
• 0.13.1
• 0.13.2
• 0.13.3

Website

• Product: https://github.com/mackron/dr_libs/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion