Benjamin Ali (glitchfox) — Security ResearchAdvisories and writeups — vulnerability research, C/C++ memory safety, fuzzing, and binary analysis.https://benjaminali.com/Advisory: Heap out-of-bounds read in dr_flac SEEKTABLE metadata parsinghttps://benjaminali.com/advisories/dr-flac-seektable-oob-read/https://benjaminali.com/advisories/dr-flac-seektable-oob-read/dr_libs (dr_flac) — status: fixedThu, 09 Jul 2026 00:00:00 GMTFinding a heap over-read in dr_flac with two hours and a fuzzerhttps://benjaminali.com/writeups/dr-flac-seektable-oob-read/https://benjaminali.com/writeups/dr-flac-seektable-oob-read/A short, targeted fuzzing session against dr_libs turned up a heap out-of-bounds read in dr_flac's SEEKTABLE metadata handling — and the interesting part was the discipline around the bug, not the bug.Thu, 09 Jul 2026 00:00:00 GMT