Off-by-One Stack Vulnerability in Libxmp Product by Libxmp
CVE-2026-111131
6.9MEDIUM
What is CVE-2026-111131?
A vulnerability exists in the Libxmp library, specifically in the P61A depacker's depack_p61a() function. This issue arises when a specially crafted headerless P61A module with 31 samples is processed, which can lead to an off-by-one stack out-of-bounds read. Attackers may exploit this flaw to access sensitive stack memory, potentially leaking data or disrupting loading processes. Proper validation of module formats and careful handling of sizes are vital to mitigate such risks.
Affected Version(s)
libxmp 0 <= 4.7.4
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology