Threats tagged 'ghsa-7qqc-5rvj-wqqw'

SDL_mixer versions 3.1.2 through 3.2.4 have a stack-based buffer overflow vulnerability in the FetchXLaw() function within src/decoder_wav.c. This flaw occurs when decoding A-law or mu-law WAV files, allowing a crafted file to overwrite approximately 1 KB of adjacent stack memory. The vulnerability can cause application crashes and may enable code execution.