CVE-2026-111163

WildMIDI versions through 0.5.0 are vulnerable to a heap out-of-bounds read in the _WM_ParseNewHmi() function located in src/f_hmi.c. The root cause is improper handling of 0xfe sub-events , where a crafted HMI file containing a 0xfe 0x10 sub-event near the buffer end allows an attacker to read u...

EUVD-2026-102290

WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in WMParseNewHmi in src/fhmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation,...