← Zuruck zu CVEs
CVE-2026-3394
LOW3.3
Beschreibung
A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVE Details
CVSS v3.1 Bewertung3.3
SchweregradLOW
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionNONE
Veroffentlicht3/1/2026
Zuletzt geandert3/5/2026
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
solhsa:soloud
Schwachen (CWE)
CWE-119
Referenzen
https://github.com/jarikomppa/soloud/(cna@vuldb.com)
https://github.com/jarikomppa/soloud/issues/401(cna@vuldb.com)
https://github.com/oneafter/0209/blob/main/so2/repro(cna@vuldb.com)
https://vuldb.com/?ctiid.348280(cna@vuldb.com)
https://vuldb.com/?id.348280(cna@vuldb.com)
https://vuldb.com/?submit.761339(cna@vuldb.com)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.