CVE-2026-75904 | libmodplug up to 0.8.9.1 MIDI Pattern Loop src/load_pat.cpp pat_smplooped smpno out-of-bounds

A vulnerability identified as critical has been detected in libmodplug up to 0.8.9.1. The affected element is the function pat_smplooped of the file src/load_pat.cpp of the component MIDI Pattern Loop Handler. This manipulation of the argument smpno causes out-of-bounds read.

This vulnerability is handled as CVE-2026-75904. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More