AZL-109736
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109736.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109736
- Upstream
- CVE-2026-111271
- Published
- 2026-10-15T22:19:27Z
- Modified
- 2026-10-22T05:37:13Z
- Summary
- CVE-2026-111271 affecting package libmodplug 0.8.9.0-12
- Details
-
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.
- References