Hoch 8.5Linux-Server
CVE-2026-122329
SDL3_mixer: SDL_mixer: Arbitrary code execution via crafted AIFF-C audio file
SDL3_mixer
SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing crashes or potential code execution.
5. Nov 2026
Original bei Red Hat öffnen