Out-of-Bounds Read Vulnerability in dr_libs MP3 Functionality by dr_mp3
CVE-2026-11315

4.3MEDIUM

Key Information:

Vendor

Mackron

Status
Dr Libs
Vendor
CVE Published:
10 November 2026

What is CVE-2026-11315?

A specific vulnerability in the dr_mp3 component of dr_libs allows an attacker to perform an out-of-bounds read by exploiting a flaw in the drmp3_init_internal functionality. This vulnerability occurs when handling specially crafted MP3 files, which may lead to unintended memory access and potential application crashes. Proper validation and handling of file inputs are crucial to prevent exploitation. For more detailed information, refer to the Talos Intelligence report.

Affected Version(s)

dr_libs 0.7.3

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Ankur Tyagi of Cisco Talos
.