EUVD-2026-102362

libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...

CVE-2026-111131

The libxmp library, versions through 4.7.4 , contains an off-by-one stack out-of-bounds read vulnerability within the prowizard P61A depacker function, specifically located at depack_p61a() in src/loaders/prowizard/p61a.c. An attacker can exploit this by providing a crafted headerless P61A module...

PT-2026-115137

libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack p61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into samp...

CVE-2026-23569: Out-of-bounds Read

An out-of-bounds read vulnerability in the TeamViewer DEX Client former 1E Client - Content Distribution Service NomadBranch.exe prior version 26.1 for Windows allows a remote attacker to leak stack memory and cause a denial of service via a crafted request. The leaked stack memory could be used ...