CVE-2026-71261

HighCVSS 7.8

Published: 05/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

dr_libs dr_wav.h contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to size_t before dividing by DRWAV_CUE_POINT_BYTES; on 32-bit builds this truncation causes the pre-allocated extra metadata capacity to be computed incorrectly.

Risk Assessment

Integer overflow may lead to incorrect memory allocation, potentially causing crashes or remote code execution when processing malicious WAV files.

Recommendation

Fix capacity calculations by using 64-bit types and checking for overflows before memory allocation.

Other vulnerabilities in dr_libs

CVE-2026-29022High
In dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c), a heap buffer overflow vulnerability exists in the drwav__read_smpl_to_metadata_obj() function. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to corrupt memory via crafted WAV files.

Original NVD description (English source)

dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to size_t before dividing by DRWAV_CUE_POINT_BYTES; on 32-bit builds this truncation causes the pre-allocated extra metadata capacity to be computed incorrectly.