Skip to content
OpenAdvisories

Package · Debian

wildmidi

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.5

    WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmi

    WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to rea…

  • Medium 6.1

    WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmp

    WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that w…