PT-2026-24932 · Jarikomppa · Soloud

Oneafter · Publicado 2026-03-12 · Atualizado 2026-03-12 · CVE-2026-4009

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions jarikomppa soloud versions prior to 20200207

Description A flaw exists in jarikomppa soloud, specifically within the WAV File Parser component. The drwav read pcm frames s16 msadpcm function in the src/audiosource/wav/dr wav.h library is susceptible to an out-of-bounds read condition. Exploitation requires local access. The exploit for this issue has been publicly disclosed.

Recommendations Upgrade to version 20200207 to address this issue. Upgrade the affected component.

Exploit

Correção

Buffer Overflow

Out of bounds Read

Enumeração de Fraquezas

CWE-119

CWE-125

Identificadores relacionados

CVE-2026-4009

Produtos afetados

Soloud

Referências · 12

• 🔥 https://github.com/oneafter/0209/blob/main/so3/repro · Exploit
• https://github.com/jarikomppa/soloud/issues/401 · Nota
• https://t.me/cveNotify/155240 · Publicação no Telegram
• https://vuldb.com/?submit.769766 · Nota
• https://vuldb.com/?ctiid.350532 · Nota
• https://vuldb.com/?id.350532 · Nota
• https://t.me/CVEtracker/47239 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2031992324281286814 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-4009 · Aviso do Fabricante
• https://github.com/jarikomppa/soloud · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4009 · Nota de Segurança
• https://twitter.com/CVEarity/status/2032099778855829921 · Publicação no Twitter