libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp. This allows attackers to read adjacent heap memory via crafted AMS files by supplying an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer. The vulnerability can lead to potential crashes and info [truncated]
MEDIUMKonstanty BialkowskiCVE published 2026-10-15
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt_len value to corrupt heap memory and crash the consuming process. This vulnerability affects systems or applications using the libmodplug library, potentiall [truncated]
MEDIUMKonstanty BialkowskiCVE published 2026-10-11
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption. The attack may be initiated remotely. The vulnerability has a medium severity and defenders should assess exposure and consider monitoring for potential resource [truncated]
MEDIUMKonstanty BialkowskiCVE published 2026-08-18
libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte static array pat_loops, so an index of zero reads pat_loops[-1], one byte before the array. This occurs when processing MIDI files, which can lead to information disclosure or denia [truncated]
