Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-14369

CVE-2025-14369

Description

dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mackron dr_flac

  • 0 to ≤ 0.13.2affected

References