CVE-2026-110876

AdPlug versions through 2.4 are affected by an out-of-bounds read vulnerability in the src/xsm.cpp file. The root cause is the processing of a negative note index , which allows reading before the note_table. Specifically, an attacker can craft an XSM file featuring the ofTAZ! signature and a son...

CVE-2026-110876 AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files

AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...