Threats tagged 'ghsa-782g-354j-4465'

SDL_mixer versions 3.1.2 through 3.2.4 have a stack-based buffer overflow vulnerability in the FetchXLaw() function within src/decoder_aiff.c. This occurs due to miscalculated output offsets when expanding A-law or mu-law samples. An attacker can exploit this by providing a specially crafted AIFF-C audio file, which causes overwriting of approximately 1 KB of adjacent stack memory during decoding. This can lead to application crashes or potentially allow arbitrary code execution.