← Database

CVE-2025-14369

MEDIUM CVSS: 5.5 Published: 2026-01-20 Modified: 2026-06-17

Description

dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool.

Affected Platforms

Unknown

Weakness Type

Unknown

References