Vulnerability in Konstanty Bialkowski Libmodplug

CVE-2011-2911

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References