CVE-2026-11315 PUBLISHED

Assigner: talos
Reserved: 04.06.2026 Published: 10.11.2026 Updated: 10.11.2026

A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3). A specially crafted .mp3 file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS Score: 4.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	None	Integrity Impact	None
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	mackron
Product	dr_libs
Versions	Default: unaffected Version 0.7.3 is affected

Credits

Discovered by Ankur Tyagi of Cisco Talos

References

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2441

Problem Types

CWE-125: Out-of-bounds Read CWE