CVE-2026-48368
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction to open a malicious file.
Risk Assessment
An attacker could gain control of the user's workstation, install malware, or steal data if the victim opens a crafted file.
Recommendation
Immediately update Audition to the latest patched version and educate users not to open files from untrusted sources.
Other vulnerabilities in Audition
See all- CVE-2026-48365High
An out-of-bounds write vulnerability in Audition could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.
- CVE-2026-48309High
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-47969Medium
Audition is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-47968High
An out-of-bounds write vulnerability in Audition could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction, as a victim must open a malicious file.
- CVE-2026-47967High
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
- CVE-2026-21316Medium
Audition versions 25.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to cause the application to crash or become unresponsive. Exploitation requires user interaction – the victim must open a malicious file.
Original NVD description (English source)
Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.