An out-of-bounds write vulnerability exists in the dr_wav library version 0.14.5 within the drwav__read_cue_to_metadata_obj function. This flaw can be triggered by processing a specially crafted .wav file, potentially allowing an attacker to cause memory corruption. The vulnerability has a high severity with a CVSS score of 8.8, indicating it can lead to significant confidentiality, integrity, and availability impacts.