dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data through any drwav_init_*_with_metadata() call on untrusted input.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-390ce5262d advisory.

    Rebuilt with updated dr_wav to fix CVE-2026-29022.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-63c5e7d076 advisory.

    Rebuilt with updated dr_wav to fix CVE-2026-29022

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ad39e4a3f advisory.

    Rebuilt with updated dr_wav to fix CVE-2026-29022

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2350c6fd8c advisory.

    Backport the fix for CVE-2026-29022

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f96e9bd006 advisory.

    Rebuilt with updated dr_wav to fix CVE-2026-29022

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d1d665c9d5 advisory.

    dr_flac     =======

    v0.13.3 - 2026-01-17
    --------------------

    - Fix a compiler compatibility issue with some inlined assembly.
    - Fix a compilation warning.

    dr_mp3     ======

    v0.7.3 - 2026-01-17
    -------------------

    - Fix an error in drmp3_open_and_read_pcm_frames_s16() and family when memory     allocation fails.
    - Fix some compilation warnings.

    dr_wav     ======

    v0.14.5 - 2026-03-03
    --------------------

    - Fix a crash when loading files with a malformed smpl chunk.
    - Fix a signed overflow bug with the MS-ADPCM decoder.

    v0.14.4 - 2026-01-17
    --------------------

    - Fix some compilation warnings.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow     vulnerability in the drwav__read_smpl_to_metadata_obj() function of dr_wav.h that allows memory corruption     via crafted WAV files. Attackers can exploit a mismatch between sampleLoopCount validation in pass 1 and     unconditional processing in pass 2 to overflow heap allocations with 36 bytes of attacker-controlled data     through any drwav_init_*_with_metadata() call on untrusted input. (CVE-2026-29022)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
303581	Fedora 44 : musescore (2026-390ce5262d)	Nessus	Fedora Local Security Checks	medium
302128	Fedora 43 : easyrpg-player (2026-63c5e7d076)	Nessus	Fedora Local Security Checks	medium
302127	Fedora 42 : easyrpg-player (2026-8ad39e4a3f)	Nessus	Fedora Local Security Checks	medium
302123	Fedora 42 : dr_libs (2026-2350c6fd8c)	Nessus	Fedora Local Security Checks	medium
302045	Fedora 44 : easyrpg-player (2026-f96e9bd006)	Nessus	Fedora Local Security Checks	medium
301906	Fedora 43 : dr_libs (2026-d1d665c9d5)	Nessus	Fedora Local Security Checks	medium
301145	Linux Distros Unpatched Vulnerability : CVE-2026-29022	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-29022

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium