CVE-2026-11315: Medium severity vulnerability

Published Nov 10, 2026

Updated

A out-of-bounds read vulnerability exists in the drmp3 drmp3initinternal functionality of drlibs (version(s): 0.7.3). A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.

Event History

Nov 10, 2026

CVE Published

via MITRE·03:29 PM

Data Sourced

via MITRE·03:29 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require user interaction?

Yes. The CVSS vector includes UI:R, indicating that exploitation requires user interaction with a malicious MP3 file.

What is the reported impact if exploitation succeeds?

The reported impact is limited to confidentiality. The CVSS vector indicates low confidentiality impact and no integrity or availability impact.

Which version is identified as affected?

The vulnerability information identifies dr_libs version 0.7.3.

CVE-2026-11315: Medium severity vulnerability

Event History

Frequently Asked Questions

Does exploitation require user interaction?

What is the reported impact if exploitation succeeds?

Which version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require user interaction?

What is the reported impact if exploitation succeeds?

Which version is identified as affected?