Product
SDL_mixer versions 3.1.2 through 3.2.4 contain a stack-based buffer overflow in the FetchXLaw() function that can be triggered by a malformed WAV file, potentially leading to arbitrary code execution.