Stack Out-of-Bounds Write Vulnerability in libTiMidity by sezero
CVE-2026-111154
6.9MEDIUM
What is CVE-2026-111154?
The libTiMidity SoundFont loader is vulnerable to a stack out-of-bounds write, which can be exploited via specially crafted .sf2 files. Attackers can manipulate generator operator values beyond expected ranges, potentially leading to corruption of stack memory. This could cause application crashes and enable further exploitation or control over vulnerable systems.
Affected Version(s)
libtimidity 0.2.8
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology