CVE-2026-111166: libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMFLoad() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libmikmodto a version that resolves this vulnerability.Fixed in 3.3.16-1
Event History
Frequently Asked Questions
Which applications are exposed to this issue?
Applications that use libmikmod through 3.3.15 and load attacker-controlled IMF module files are exposed to a crash. The issue is in the IMF_Load() loader.
What does an attacker need to trigger the vulnerability?
An attacker needs a victim to load a crafted IMF module. The malicious file enables the linear-period header flag and maps notes to out-of-range samples, leading to an out-of-bounds heap read.
What is the practical impact?
The provided details identify a denial-of-service impact: the out-of-bounds read can crash an application that loads the crafted file. No confidentiality or integrity impact is specified.