Hmm I'm kind of surprised browsers actually load WAV data with that mangled header. Audio 'quirks' mode? Just because something could work without the header doesn't mean it should (or at least not advertised as a standard format). I wonder if there are fuzzing opportunities in that part of the browser code..