PT-2026-115169

Name of the Vulnerable Software and Affected Versions WildMIDI versions 0.5.0 and earlier Description A heap out-of-bounds read occurs in the WM ParseNewHmi function within src/f hmi.c when handling 0xfe sub-events. An attacker can provide a specially crafted HMI file containing a 0xfe 0x10...