Miniaudio · Miniaudio · CVE-2026-32837
**Name of the Vulnerable Software and Affected Versions**
miniaudio versions 0.11.25 and earlier
**Description**
The software contains a heap out-of-bounds read issue within the WAV BEXT metadata parser. Processing specially crafted WAV files can trigger memory access violations. Improper handling of null-termination in the coding history field allows attackers to cause out-of-bounds reads beyond the allocated metadata pool, potentially leading to application crashes or denial of service.
**Recommendations**
Update to a version of miniaudio later than 0.11.25.