Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-03 | 3 | Disclosure2General1 |
| 2026-03-13 | 2 | Disclosure1Patch1 |
Just a heads up for the Fedora and open-source gaming community: CVE-2026-29022 has been patched in easyrpg-player for #Fedora 43. Read more: 👉 https://tinyurl.com/8nhzu8v6 #Security https://t.co/AKecY2AZog
Post summary
The tweet announces that CVE‑2026‑29022 has been patched in easyrpg‑player for Fedora 43, offering a link for more information.
The #Fedora 42 EasyRPG Player update is a masterclass in dependency management. A single audio library (dr_wav) posed a critical code execution risk (CVE-2026-29022). Read more: 👉 https://tinyurl.com/6csn36wc #Security https://t.co/oaeiSA2wgE
Post summary
The tweet announces a critical code execution vulnerability (CVE-2026-29022) in Fedora 42's EasyRPG Player caused by the dr_wav audio library and directs readers to additional details.
CVE-2026-29022 Heap Buffer Overflow in dr_libs WAV Metadata Parsing Enables Memory Corruption https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29022
Post summary
A heap buffer overflow vulnerability (CVE-2026-29022) in dr_libs WAV metadata parsing has been disclosed, allowing memory corruption.
CVE-2026-29022 dr_libs version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav… https://www.cve.org/CVERecord?id=CVE-2026-29022
Post summary
The CVE-2026-29022 details a heap buffer overflow in dr_libs before version 0.14.4, which is fixed in a specific commit.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-29022 Intel Report: https://ift.tt/HVFjIGA
Post summary
A brief alert links to an Intel report on CVE-2026-29022 but provides no further technical or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mackron | dr_libs | - | - | - |