CVE-2017-11661

CVE-2017-11661 affects WildMIDI prior to the 0.4.2 release. The vulnerability is located in the _WM_SetupMidiEvent function (internal_midi.c:2318) and can cause a denial of service through processing a specially crafted MIDI file, resulting in an invalid memory read and application crash. Multipl...

CVE-2017-11662

The vulnerability CVE-2017-11662 affects WildMIDI up to version 0.4.2, involving the _WM_ParseNewMidi function in f_midi.c which can cause a denial of service through a crafted MIDI file, resulting in an invalid memory read and application crash. The issue is addressed in the upstream 0.4.2 relea...

CVE-2017-11663

CVE-2017-11663 affects WildMIDI 0.4.2 and is caused by a flaw in the _WM_SetupMidiEvent function (internal_midi.c:2315) that can trigger a denial of service via a crafted MIDI file (invalid memory read, application crash). Several connected advisories reflect that upstream patches were released t...

CVE-2017-11664

CVE-2017-11664 affects WildMIDI 0.4.2, where the function _WM_SetupMidiEvent in internal_midi.c:2122 can cause a denial of service via a crafted MIDI file, resulting in an invalid memory read and application crash. Exploitation details are not provided in the documents; no in‑wild exploit info is...

CVE-2017-1000418

CVE-2017-1000418 affects the WildMIDI project via the WildMIDI_Open function. The vulnerability arises from a heap-based buffer overflow triggered by a crafted file, allowing remote attackers to cause a denial of service and potentially other unspecified impact. Several connected sources (NVD, Re...