CVE-2026-3393

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-3393

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3393.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-3393

Published

2026-03-01T12:02:09.072Z

Modified

2026-07-15T01:48:59.288263658Z

Severity

1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

jarikomppa soloud Audio File soloud_wav.cpp loadflac heap-based overflow

Details

A security vulnerability has been detected in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac of the file src/audiosource/wav/soloud_wav.cpp of the component Audio File Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cwe_ids": [
        "CWE-119",
        "CWE-122"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3393.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/jarikomppa/soloud

Affected ranges

Type

GIT

Repo

https://github.com/jarikomppa/soloud

Events

Introduced

c8e339fdce5c7107bdb3e64bbf707c8fd3449beb

Last affected

c8e339fdce5c7107bdb3e64bbf707c8fd3449beb

Database specific

{
    "extracted_events": [
        {
            "introduced": "20200207"
        },
        {
            "last_affected": "20200207"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

Other

20200207

RELEASE_20200207

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3393.json"