CVE-2025-14369

CVE-2025-14369 PUBLISHED

Description (CNA)

dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool.

Affected (CNA)

Vendor / product	Versions
mackron / dr_flac	affected 0 through 0.13.2

CWE

No CWE identifiers supplied.

References

https://github.com/mackron/dr_libs/commit/b2197b2eb7bb609df76315bebf44db4ec2a1aed0

ADP enrichment

CVE

No English description supplied.

https://www.kb.cert.org/vuls/id/924114

CISA-ADP

No English description supplied.

No references supplied.