CVE-2026-111161: libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates
libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BWMidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adlopenFile() or adlopenData() to crash the hosting media player or game engine.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications such as media players or game engines that use affected libADLMIDI versions and open attacker-supplied MIDI files through adl_openFile() or adl_openData() are exposed.
What does an attacker need to exploit it?
The attacker needs to cause the application to process a crafted MIDI file. The file must include a note-on event with status 0x9F and note value 0x7F; no privileges are required, but user interaction is required.
What is the practical impact?
Processing the crafted MIDI file can corrupt stack memory and crash the hosting application.