CVE-2017-11661

The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-17

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Wildmidi (Mindwerks)

References

• http://seclists.org/fulldisclosure/2017/Aug/12
• https://www.exploit-db.com/exploits/42433/