https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 09:03:03 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-111271 <p>libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.</p> <p>libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111271 https://db.gcve.eu/vuln/ghsa-pxwm-j3xc-rxqw <p>libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.</p> <p>libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.</p> https://db.gcve.eu/vuln/ghsa-pxwm-j3xc-rxqw https://db.gcve.eu/vuln/ubuntu-cve-2026-111271 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gst-plugins-bad0.10, Ubuntu:14.04:LTS: libmodplug, Ubuntu:16.04:LTS: libmodplug, Ubuntu:18.04:LTS: libmodplug, Ubuntu:20.04:LTS: libmodplug, Ubuntu:22.04:LTS: libmodplug, Ubuntu:24.04:LTS: libmodplug, Ubuntu:26.10: libmodplug, Ubuntu:26.04:LTS: libmodplug</p> <p>libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gst-plugins-bad0.10, Ubuntu:14.04:LTS: libmodplug, Ubuntu:16.04:LTS: libmodplug, Ubuntu:18.04:LTS: libmodplug, Ubuntu:20.04:LTS: libmodplug, Ubuntu:22.04:LTS: libmodplug, Ubuntu:24.04:LTS: libmodplug, Ubuntu:26.10: libmodplug, Ubuntu:26.04:LTS: libmodplug</p> <p>libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-111271