CVE-2026-111164 UADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Module

UADE through 3.05 contains an out-of-bounds read vulnerability in uadefilemagic in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer, crashing application...

CVE-2026-111164

The UADE music player, versions through 3.05 , is vulnerable to an out-of-bounds read in the uade_filemagic() function within amifilemagic.c. The root cause is unsigned bufsize subtraction wrapping triggered by short inputs. An attacker can provide a crafted short module that bypasses format prob...