libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates

Advisories

libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequencer noteStates

Severity: medium
Date: 10/15/2026
Affecting: libADLMIDI >= 1.6.2, <= 1.6.2.1
CVE: CVE-2026-111161
CWE: CWE-787 Out-of-bounds Write
CVSS: 6.9
CVSS V4 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
References: https://hackmd.io/@haind-pwn/libadlmidi-notestates-note-index-stack-oob
https://github.com/Wohlstand/libADLMIDI/blob/99c5e03a5cf9b4fdf35b53efddb853c96320d50f/src/midiseq/impl/read_smf_impl.hpp#L113
https://github.com/Wohlstand/libADLMIDI/blob/99c5e03a5cf9b4fdf35b53efddb853c96320d50f/src/midiseq/impl/miditrack_impl.hpp#L350-L357
https://github.com/Wohlstand/libADLMIDI
Credit: HaiND from the Post and Telecommunication Institute of Technology
Description: libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adl_openFile() or adl_openData() to crash the hosting media player or game engine.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.

Vulnerability Prioritization
Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
Early Warning System
Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

Schedule a Demo