CVE-2019-15151: Double Free in Adplug – CVSS 9.8 · Watchpost

← All vulnerabilities

Double Free in Adplug

严重 9.8CVE-2019-15151 · GHSA-874w-m2v2-mj64 · Published 18/08/2019 · updated 17/06/2026

要点

CVE-2019-15151 是影响 adplug, adplug (adplug project) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.1%，高于 81.7% 的漏洞。
修复：升级到 2.3.3 或更高版本。

Package	Affected versions	Patched versions
adplug NuGet	`< 2.3.3`	`2.3.3`
adplug adplug_project	`= 2.3.1`	No fix yet

Description

AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.

NVD description

AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.

References

nvd.nist.gov/vuln/detail/CVE-2019-15151 · ADVISORY
adplug/adplug · WEB
adplug/adplug commit 1a282a4 · WEB
miller-alex/adplug commit 8abb932 · WEB
adplug/adplug · PACKAGE
lists.fedoraproject.org/archives/list/[email protected]/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE · WEB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free