Double-Free Vulnerabilities in AdPlug by AdPlug
CVE-2018-17825

9.8CRITICAL

Key Information:

Vendor: Adplug Project
Status: Adplug
Vendor: CVE Published:; 1 October 2018

🔔 Create Adplug Project Vulnerability Alert

What is CVE-2018-17825?

A set of double-free vulnerabilities has been identified in the AdPlug version 2.3.1. The vulnerabilities occur in the CEmuopl class located in emuopl.cpp due to improper management of memory deallocations within a destructor. This results from two calls to OPLDestroy, each attempting to free shared resources such as TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE, potentially leading to system instability and security risks. Addressing these vulnerabilities is essential for maintaining the integrity and performance of systems utilizing AdPlug.