The vulnerability exists in dr_libs' dr_wav.h file, specifically in the function drwav__metadata_process_chunk(). On 32-bit systems, the 64-bit W64 chunk sizeInBytes is truncated to size_t, causing an incorrect pre-allocated capacity estimate for metadata. Later, the actual cue point count is used without verifying it against this incorrect estimate. The only bounds check is a DRWAV_ASSERT, which is disabled in release builds by default. This flaw allows an attacker to craft a malicious W64 WAV file that triggers a heap buffer overflow in 32-bit applications parsing untrusted WAV metadata.

Successful exploitation can lead to a heap buffer overflow in 32-bit applications using dr_libs to parse W64 WAV metadata. The CVSS 3.1 score of 7.8 indicates high impact, with potential for confidentiality, integrity, and availability compromise. However, exploitation requires local access (AV:L) and user interaction (UI:R). No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted W64 WAV files on 32-bit systems using dr_libs. Consider using 64-bit builds where this truncation does not occur. Monitor vendor channels for official patches or updates.