AZL-108266
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108266.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108266
- Upstream
- Published
- 2026-10-15T19:17:32Z
- Modified
- 2026-10-17T05:32:47Z
- Summary
- CVE-2026-111166 affecting package libmikmod 3.3.11.1-14
- Details
-
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
- References