CVE-2026-122328: SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder
SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes or potentially code execution.
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Deployments using SDL_mixer versions 3.1.2 through 3.2.4 are affected when they decode A-law or mu-law WAV files. The issue is locally exploitable with no privileges required, but exploitation requires a user interaction event such as opening or processing an attacker-supplied WAV file.
What kind of input triggers the overflow?
A crafted A-law or mu-law WAV file can trigger the issue during decoding in FetchXLaw(). Its doubly-offset float expansion can overwrite approximately 1 KB of adjacent stack memory.
What can happen if the flaw is exploited?
The overflow can crash the affected application and may allow code execution. The reported impact includes compromise of confidentiality, integrity, and availability.
How can I determine whether I am affected?
Check whether your application bundles or links against SDL_mixer 3.1.2 through 3.2.4, and whether it processes WAV content, particularly A-law or mu-law encoded files. Systems that do not decode those WAV encodings are not described as triggering this vulnerable code path.