Vulnerability in Konstanty Bialkowski Libmodplug

CVE-2011-2914

Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples.

EPSS: 0.046 (90.7th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References