CVE-2026-109828Medium· 4.3▾ SunlitA vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remot…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a manipulation results in use of uninitialized variable. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-19212Medium· 4.3A vulnerability was determined in WonderTrader up to 0.9.9
CVE-2026-5888Medium· 6.5Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page
CVE-2026-103577High· 7.5Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-109854Low· 2.5A flaw was found in m17n-lib
CVE-2021-3928High· 7.8vim is vulnerable to Use of Uninitialized Variable
CVE-2025-61926NoneAllstar is a GitHub App to set and enforce security policies