Threats affecting pkg:github/libmt32emu

A heap-based buffer overflow vulnerability exists in libmt32emu versions before 2.8.4 in the MidiStreamParserImpl::parseSysex function. This flaw allows attackers to write beyond allocated heap memory by supplying oversized, unterminated SysEx messages exceeding 32768 bytes via the mt32emu_parse_stream API. Successful exploitation can corrupt heap memory and cause application crashes. The issue is fixed in version 2.8.4.