Skip to content
OpenAdvisories

Package · Debian

libmodplug

16 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.3

    libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File

    libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array pat_loops, so an in…