CVE-2017-11661

High

Published: 17/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The _WM_SetupMidiEvent function in internal_midi.c in WildMIDI 0.4.2 can lead to denial of service through invalid memory reads and application crashes when processing a crafted MIDI file.

Risk Assessment

The organization may experience application downtime, potentially leading to loss of availability of services related to MIDI file processing.

Recommendation

It is recommended to update to a newer version of WildMIDI to mitigate this vulnerability and to monitor the application for abnormal behavior.

Other vulnerabilities in WildMIDI 0.4.2

CVE-2017-11662High
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can lead to denial of service through invalid memory read and application crash when processing a crafted mid file.

Original NVD description (English source)

The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS