| Package | Affected versions | Patched versions |
|---|---|---|
| libmodplug | = 0.8= 0.8.4= 0.8.5= 0.8.6= 0.8.7= 0.8.8= 0.8.8.1= 0.8.8.2≤ 0.8.8.3 |
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free