Threats affecting pkg:github/uade-music-player/uade

UADE versions up to 3.05 have an out-of-bounds read vulnerability in the uade_filemagic() function due to unsigned buffer size subtraction wrapping on short inputs. This flaw allows crafted short modules to bypass format probe bounds checks and read beyond the intended buffer, potentially causing application crashes.