Medium severity5.5NVD Advisory· Published Oct 15, 2026
CVE-2026-111271
CVE-2026-111271
Description
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder past the input buffer and crashing any libmodplug consumer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=0.8.9.1
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.