CVE-2026-111165: Out-of-bounds Read in sezero libmikmod

libmikmod versions up to and including 3.3.15 contain a global out-of-bounds read vulnerability in the MultiTracker loader function MTM_Load(). The vulnerability arises because the module channel count is not properly clamped, enabling an attacker to supply a specially crafted .mtm file with a channel count exceeding 32. This leads to reading beyond the static 'pat' array, corrupting track indices and potentially crashing the application that loads the module.

An attacker can cause an application using libmikmod to crash by supplying a maliciously crafted .mtm file with an excessive channel count. This results in memory corruption due to out-of-bounds reads, which may disrupt service or cause denial of service. There is no indication of code execution or data disclosure from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted or malicious .mtm files with libmikmod. Monitor vendor channels for updates regarding an official fix.