CVE-2026-3394

Summary

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected Software

Weaknesses

• CWE-119: Memory Corruption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/?id.348280
• https://vuldb.com/?ctiid.348280
• https://vuldb.com/?submit.761339
• https://github.com/jarikomppa/soloud/issues/401
• https://github.com/oneafter/0209/blob/main/so2/repro
• https://github.com/jarikomppa/soloud/

• ←Previous
• Next→