Threat database

WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation, crashing the decoding application.

WildMIDI versions up to 0.5.0 contain a heap out-of-bounds read vulnerability in the HMP parser function _WM_ParseNewHmp(). This flaw allows attackers to craft .hmp files with underflowed chunk lengths that wrap to a large value, leading to reading beyond allocated buffers. Exploitation can cause application crashes or unintended exposure of heap memory through WildMidi_GetInfo().