CVE-2026-32837 - Vulnerability Analysis

Overview

miniaudio <= 0.11.25 contains a heap out-of-bounds read caused by improper null-termination handling in the WAV BEXT metadata parser, letting attackers cause application crashes or denial of service by processing crafted WAV files.

Severity & Score

Impact

Attackers can cause application crashes or denial of service by triggering out-of-bounds memory reads.

Mitigation

Update to the latest version beyond 0.11.25.

References

• https://github.com/mackron/miniaudio/issues/1101
• https://www.vulncheck.com/advisories/mackron-miniaudio-out-of-bounds-read-in-bext-coding-history-parsing

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner