CVE-2026-111163 in WildMIDI
Resumen
por MITRE • 2026-10-15
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation, crashing the decoding application.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.