214 matches found
CVE-2026-110876
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...
EUVD-2026-102351
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...
CVE-2026-110876
AdPlug versions through 2.4 are affected by an out-of-bounds read vulnerability in the src/xsm.cpp file. The root cause is the processing of a negative note index , which allows reading before the note_table. Specifically, an attacker can craft an XSM file featuring the ofTAZ! signature and a son...
CVE-2026-110876 AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...
CVE-2026-110876 AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...
CVE-2026-110875
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...
EUVD-2026-102350
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...
CVE-2026-110875
AdPlug versions through 2.4 are vulnerable to a heap-based buffer overflow in the CksmPlayer::update() function located in src/ksm.cpp. The vulnerability occurs because the software writes past the fixed databuf[2048] array without performing proper bounds checking. An attacker can exploit this b...
CVE-2026-110875 AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...
CVE-2026-110875 AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp
AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update in src/ksm.cpp that writes past the fixed databuf2048 array without bounds checking. Attackers can supply a crafted .ksm module whose notes share one time slot to overflow the heap player object, causing memory...
PT-2026-115125
Name of the Vulnerable Software and Affected Versions AdPlug versions prior to 2.5 Description A heap-based buffer overflow occurs in the CksmPlayer::update function within src/ksm.cpp. The issue arises because the software writes past the fixed databuf2048 array without performing bounds checkin...
CVE-2026-110877: Out-of-bounds Read
AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmounpacker::decrypt, opened via...
PT-2026-115127
Name of the Vulnerable Software and Affected Versions AdPlug versions prior to 2.5 Description A heap out-of-bounds read occurs in the CdmoLoader::load function within src/dmo.cpp. This issue allows an attacker to read data beyond a heap allocation by providing a truncated TwinTeam DMO file...
CVE-2026-110876: Out-of-bounds Read
AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before notetable by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read duri...
PT-2026-115126
Name of the Vulnerable Software and Affected Versions AdPlug versions prior to 2.5 Description An out-of-bounds read exists in src/xsm.cpp that allows attackers to read memory before note table by providing a negative note index. This occurs when processing an XSM file containing the ofTAZ!...
EUVD-2019-5880
Malware in sbrugna...
EUVD-2019-5841
Malware in sbrugna...
EUVD-2019-5879
Malware in sbrugna...