Threats affecting pkg:github/SDL_mixer

SDL_mixer versions 3.1.2 through 3.2.4 contain a stack-based buffer overflow vulnerability in the FetchXLaw() function within src/decoder_aiff.c. This flaw arises from miscalculated output offsets when expanding A-law or mu-law audio samples, allowing an attacker to craft a malicious AIFF-C file that overwrites approximately 1 KB of adjacent stack memory during decoding. Exploitation can lead to application crashes or potentially arbitrary code execution.

SDL_mixer versions 3.1.2 through 3.2.4 have a stack-based buffer overflow vulnerability in the FetchXLaw() function when decoding A-law or mu-law WAV files. This flaw allows crafted WAV files to overwrite approximately 1 KB of adjacent stack memory, potentially causing application crashes or arbitrary code execution.