Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-111270— libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSM

Quick assessment

Affected
Konstanty Bialkowski libmodplug
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libmodplug 0.8.9.1 及之前版本中存在一个堆溢出写入漏洞，位于 src/load_dsm.cpp 中的 CSoundFile::ReadDSM() 函数里。该问题是由于 nPat 变量未与 MAX_PATTERNS 进行边界检查所致。攻击者可以通过构造包含超过 240 个 PATT 数据块或具有包装（wrapping）的 patt_len 值的恶意 DSM 文件，导致堆内存被破坏，并致使使用该文件的进程崩溃。

CVSS 6.1 · Medium EPSS 0.13% · P2

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
Konstanty Bialkowski libmodplug ≤ 0.8.9.1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-111270

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSM
Source: CVE Program / CVE List V5
Vulnerability Description
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping patt_len value to corrupt heap memory and crash the consuming process.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Konstanty Bialkowski libmodplug 0 ~ 0.8.9.1 -

II. Public POCs for CVE-2026-111270

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-111270

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-111270 (1)

Vendor Advisories for CVE-2026-111270 (1)

Proof of Concept for CVE-2026-111270 (1)

Other References for CVE-2026-111270 (1)

IV. Related Vulnerabilities

Same product: libmodplug
Same vendor: Konstanty Bialkowski
Same weakness: CWE-787

V. Comments for CVE-2026-111270

No comments yet

Leave a comment