PT-2026-115262 · Konstanty Bialkowski · Libmodplug
CVSS v3.1
6.1
Medium
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H |
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load dsm.cpp because nPat is never checked against MAX PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt len value to corrupt heap memory and crash the consuming process.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libmodplug