CVE-2026-122329High· 7.8▾ TwilightSDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwri…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing crashes or potential code execution.
SDL_mixer >= 3.1.2 <= 3.2.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122328High· 7.8SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder
CVE-2026-117557Medium· 6.1SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader
CVE-2024-1151Medium· 5.5Kernel: stack overflow problem in open vswitch kernel module leading to dos
CVE-2023-6693Medium· 4.9Qemu: virtio-net: stack buffer overflow in virtio_net_flush_tx()
CVE-2024-31449High· 7.0Lua library commands may lead to stack overflow and RCE in Redis
CVE-2025-29988Medium· 6.9Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability