VULNERABILITY INTELLIGENCE

CVE-2011-2912

CVSS score6.8 NONE
EPSS probability4.30%
CISA KEVNot currently listed
Published2012-06-07
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with an invalid offset.

Weakness classification

  • nvd@nist.gov: CWE-119

Primary references