Debian/miniaudio: unknown
miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory acc
Action: Upgrade miniaudio to 0.11.25+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.25+dfsg-1 | - |
Fixed versions
| 0.11.25+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-32837#Debian:14/miniaudio
- https://security-tracker.debian.org/tracker/CVE-2026-32837
published · modified · JSON