https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-32837.htmlhttps://patchthecve.com/cve/CVE-2026-32837.htmlTue, 14 Jul 2026 19:16:56 +0000MEDIUM 4.0: miniaudio version 0.11.25 and earlier (fixed in commits 1df46ae and 1df46ae) contain a heap out-of-bounds read vulnerability in the WAV BEXT metadata parser that allows attackers to trigger memory access violations by processing crafted WAV files. Attackers can exploit improper null-termination handhttps://patchthecve.com/cve/CVE-2026-32836.htmlhttps://patchthecve.com/cve/CVE-2026-32836.htmlTue, 14 Jul 2026 19:16:56 +0000MEDIUM 6.2: dr_libs dr_flac.h version 0.13.3 and earlier (fixed in commits fefced4, 4f5a4cd, and 663239a) contain an uncontrolled memory allocation vulnerability in drflac__read_and_decode_metadata() that allows attackers to trigger excessive memory allocation by supplying crafted PICTURE metadata blocks. Attachttps://patchthecve.com/cve/CVE-2026-29022.htmlhttps://patchthecve.com/cve/CVE-2026-29022.htmlTue, 14 Jul 2026 19:16:55 +0000HIGH 7.3: dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation ihttps://patchthecve.com/cve/CVE-2024-41147.htmlhttps://patchthecve.com/cve/CVE-2024-41147.htmlWed, 17 Jun 2026 07:47:22 +0000HIGH 7.7: An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.