CVE-2017-11662

High

Published: 17/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can lead to denial of service through invalid memory read and application crash when processing a crafted mid file.

Risk Assessment

An attacker could exploit this vulnerability to remotely trigger application crashes, potentially leading to service availability interruptions.

Recommendation

It is recommended to update to a newer version of WildMIDI to mitigate this vulnerability and to monitor application logs for potential attack attempts.

Other vulnerabilities in WildMIDI 0.4.2

CVE-2017-11661High
The _WM_SetupMidiEvent function in internal_midi.c in WildMIDI 0.4.2 can lead to denial of service through invalid memory reads and application crashes when processing a crafted MIDI file.

Original NVD description (English source)

The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS