CVE-2025-14369 — CVE-2025-14369
dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calc…
Published: 2026-01-20 · CVSS: 5.5 · CVSS 3.1
dr_flac, an audio decoder within the dr_libs toolset, contains an integer overflow vulnerability flaw due to trusting the totalPCMFrameCount field from FLAC metadata before calculating buffer size, allowing an attacker with a specially crafted file to perform DoS against programs using the tool.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7