CVE-2026-3393 | jarikomppa soloud up to 20200207 Audio File soloud_wav.cpp SoLoud::Wav::loadflac heap-based overflow (Issue 401)

A vulnerability classified as problematic was found in jarikomppa soloud up to 20200207. The impacted element is the function SoLoud::Wav::loadflac of the file src/audiosource/wav/soloud_wav.cpp of the component Audio File Handler. Such manipulation leads to heap-based buffer overflow.

This vulnerability is listed as CVE-2026-3393. The attack must be carried out locally. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.