Out-of-Bounds Write Vulnerability in dr_libs Affecting Multiple Versions
CVE-2026-11316

8.8HIGH

Key Information:

Vendor

Mackron

Status
Dr Libs
Vendor
CVE Published:
10 November 2026

What is CVE-2026-11316?

A vulnerability exists within the drwav__read_cue_to_metadata_obj functionality of dr_libs that allows an out-of-bounds write. When an attacker provides a specially crafted .wav file, it can lead to unauthorized memory access and potential exploitation of the affected system. This type of vulnerability emphasizes the importance of validating input data to prevent attackers from manipulating system memory.

Affected Version(s)

dr_libs 0.14.5

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Ankur Tyagi of Cisco Talos
.