VYPR

uade

by Uade Music Player

CVEs (1)

  • CVE-2026-111164MedOct 15, 2026
    risk 0.29cvss 5.5epss —

    UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can supply a crafted short module that passes format probe bounds checks and reads far past the buffer,…