CVE-2024-41147

An out-of-bounds write vulnerability exists in the ma_dr_flac__decode_samples__lpc functionality of Miniaudio miniaudio v0.11.21. A specially crafted .flac file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-122

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2063Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2063Exploit, Third Party Advisory

Published

Mar 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-41140Zohocorp ManageEngine Applications Manager versions 174000 a…6.5
• CVE-2024-41141Stored cross-site scripting vulnerability exists in EC-CUBE …6.1
• CVE-2024-41143Origin validation error vulnerability exists in SKYSEA Clien…7.8
• CVE-2024-41144Mattermost versions 9.9.x <= 9.9.0, 9.5.x <= 9.5.6, 9.7.x <=…7.1
• CVE-2024-41145A library injection vulnerability exists in the WebView.app …9.8
• CVE-2024-41146Use of Multiple Resources with Duplicate Identifier (CWE-694…4.6
• CVE-2024-41148A code injection vulnerability has been discovered in the Ro…7.8
• CVE-2024-41149In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-4115A vulnerability, which was classified as critical, was found…8.8
• CVE-2024-41150An Stored Cross-site Scripting vulnerability in request modu…6.1
• CVE-2024-41151Deserialization of Untrusted Data vulnerability in Apache He…8.8
• CVE-2024-41153Command injection vulnerability in the Edge Computing UI for…7.2