CVE-2026-3394

A vulnerability was detected in jarikomppa soloud up to 20200207. This affects the function SoLoud::Wav::loadwav of the file src/audiosource/wav/soloud_wav.cpp of the component WAV File Parser. Performing a manipulation results in memory corruption. The attack must be initiated from a local position. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-119

• https://github.com/jarikomppa/soloud/Product
• https://github.com/jarikomppa/soloud/issues/401Exploit, Issue Tracking, Vendor Advisory
• https://github.com/oneafter/0209/blob/main/so2/reproExploit
• https://vuldb.com/?ctiid.348280Permissions Required, VDB Entry
• https://vuldb.com/?id.348280Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.761339Third Party Advisory, VDB Entry

Published

Mar 1, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-33934OpenEMR is a free and open source electronic health records …4.3
• CVE-2026-33935MyTube is a self-hosted downloader and player for several vi…7.5
• CVE-2026-33936The `ecdsa` PyPI package is a pure Python implementation of …5.3
• CVE-2026-33937Handlebars provides the power necessary to let users build s…9.8
• CVE-2026-33938Handlebars provides the power necessary to let users build s…8.1
• CVE-2026-33939Handlebars provides the power necessary to let users build s…7.5
• CVE-2026-33940Handlebars provides the power necessary to let users build s…8.1
• CVE-2026-33941Handlebars provides the power necessary to let users build s…8.2
• CVE-2026-33942Saloon is a PHP library that gives users tools to build API …9.8
• CVE-2026-33943Happy DOM is a JavaScript implementation of a web browser wi…9.8
• CVE-2026-33945Incus is a system container and virtual machine manager. Inc…9.6
• CVE-2026-33946MCP Ruby SDK is the official Ruby SDK for Model Context Prot…5.9