CyberSecBulletin

Mackron vulnerabilities

We track 3 vulnerabilities in Mackron products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.

3vulnerabilities
0critical
3high
0exploited
8.1average CVSS score

Latest Mackron vulnerabilities

  • 8.8 High severity

    dr_libs: Out-of-bounds Write

    CVE-2026-11316Mackron

    A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5). A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this v

  • 7.8 High severity

    dr_libs: Integer Overflow or Wraparound

    CVE-2026-71261Mackron

    dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to size_t before dividing by DRWAV_C

  • 7.8 High severity

    dr_libs dr_wav.h: Out-of-bounds Write

    CVE-2026-29022Mackron

    dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a misma