Buffer overflow in Konstanty Bialkowski Libmodplug

CVE-2013-4234

Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted ABC.

Vulnerability class: Buffer Overflow

EPSS: 0.044 (90.2th percentile) — read the EPSS interpretation.