Skip to content
Threat Feed
Subscribe

Vendor

Simple DirectMedia Layer

1 brief RSS
high advisory

SDL_mixer: Stack-based buffer overflow in FetchXLaw() (CVE-2026-122328)

SDL_mixer versions 3.1.2 through 3.2.4 contain a stack-based buffer overflow in the FetchXLaw() function that can be triggered by a malformed WAV file, potentially leading to arbitrary code execution.

SDL_mixer vulnerability memory-corruption media-processing
1t 1c