CVE-2026-111163
MediumCVSS 5.5Summary
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation, crashing the decoding application.
Risk Assessment
A crafted HMI file can crash the decoding application, leading to denial of service.
Recommendation
Upgrade WildMIDI beyond 0.5.0 and avoid decoding untrusted HMI files until patched.
Other vulnerabilities in WildMIDI
See all- CVE-2026-111162Medium
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing applications or exposing heap bytes through WildMidi_GetInfo().
- CVE-2017-11662High
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can lead to denial of service through invalid memory read and application crash when processing a crafted mid file.
- CVE-2017-11661High
The _WM_SetupMidiEvent function in internal_midi.c in WildMIDI 0.4.2 can lead to denial of service through invalid memory reads and application crashes when processing a crafted MIDI file.
Original NVD description (English source)
WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can supply a crafted HMI file placing a 0xfe 0x10 sub-event near the buffer end to read up to four bytes past the allocation, crashing the decoding application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS