Vulnerabilities

TI-2017-14637 CVE-2017-1000418 · GHSA-fx9c-663j-cxhv

The WildMidi_Open function in WildMIDI since commit…

LOW 37

The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspec…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01672 Published 2018-01-02 Will not fix CWE-119

TI-2017-08636 CVE-2017-11664 · GHSA-4hv5-rh3v-rr4g

The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a…

MEDIUM 40

The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.08498 Published 2017-08-17 No fix listed CWE-125

TI-2017-08635 CVE-2017-11663 · GHSA-vg2h-xpwx-rj8w

The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a…

LOW 37

The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.05668 Published 2017-08-17 No fix listed CWE-125

TI-2017-08634 CVE-2017-11662 · GHSA-cmj3-gcg6-cpp8

The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service…

MEDIUM 45

The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09981 Published 2017-08-17 No fix listed CWE-125

TI-2017-08633 CVE-2017-11661 · GHSA-8gh9-3698-mj6g

The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a…

MEDIUM 46

The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.1108 Published 2017-08-17 No fix listed CWE-125