CyberRota Analysis
AI-GeneratedThe vulnerability exists in the dr_libs library, specifically in the dr_wav.h file, where an integer overflow occurs during the parsing of W64 CUE chunk metadata. This flaw can lead to a heap buffer overflow in 32-bit applications when processing maliciously crafted W64 WAV files, potentially allowing attackers to execute arbitrary code. Organizations utilizing dr_libs for audio processing, particularly in 32-bit environments, should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to size_t before dividing by DRWAV_CUE_POINT_BYTES; on 32-bit builds this truncation causes the pre-allocated extra metadata capacity to be computed incorrectly.