AZL-110351
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-110351.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-110351
- Upstream
- CVE-2026-111270
- Published
- 2026-10-15T22:19:27Z
- Modified
- 2026-10-23T14:17:03Z
- Summary
- CVE-2026-111270 affecting package libmodplug 0.8.9.0-12
- Details
-
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt_len value to corrupt heap memory and crash the consuming process.
- References