CVE-2026-111166: libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
Affected Software
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications that use libmikmod through 3.3.15 and load attacker-controlled IMF module files are exposed to a crash. The issue is in the IMF_Load() loader.
What does an attacker need to trigger the vulnerability?
An attacker needs a victim to load a crafted IMF module. The malicious file enables the linear-period header flag and maps notes to out-of-range samples, leading to an out-of-bounds heap read.
What is the practical impact?
The provided details identify a denial-of-service impact: the out-of-bounds read can crash an application that loads the crafted file. No confidentiality or integrity impact is specified.