CVE-2026-122328High· 7.8▾ TwilightSDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion o…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes or potentially code execution.
SDL_mixer >= 3.1.2 <= 3.2.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122329High· 7.8SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder
CVE-2026-117557Medium· 6.1SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader
CVE-2024-1151Medium· 5.5Kernel: stack overflow problem in open vswitch kernel module leading to dos
CVE-2023-6693Medium· 4.9Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
CVE-2024-31449High· 7.0Lua library commands may lead to stack overflow and RCE in Redis
CVE-2025-29988Medium· 6.9Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability