CVE-2026-71261

Name of the Vulnerable Software and Affected Versions dr libs dr wav.h (affected versions not specified)

Description An integer overflow exists in W64 CUE chunk metadata parsing. In the drwav metadata process chunk() function, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to size t before dividing by DRWAV CUE POINT BYTES. On 32-bit builds, this truncation leads to an incorrect computation of the pre-allocated extra metadata capacity. Subsequently, the drwav read cue to metadata obj() function calculates the actual cue point count and allocation size using the attacker-controlled cuePointCount field without verifying it against the initial capacity estimate. Because the bounds enforcement in drwav metadata get memory() relies on a DRWAV ASSERT that is disabled in release builds, a specially crafted W64 WAV file can trigger a heap buffer overflow in 32-bit applications parsing untrusted WAV metadata.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.