CVE-2026-111131
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c.
Published Oct 15, 2026 · updated Oct 16, 2026
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sample metadata or disrupt loading.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sample metadata or disrupt loading.
Oct 16, 2026 · OSV.dev
Updated
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sample metadata or disrupt loading.
Affected
- Debian:12 libxmp4.5.0-2, 4.6.0-1, 4.6.0-2
- Debian:13 libxmp4.6.2-2, 4.6.3-1, 4.6.3-2
- Debian:14 libxmp4.6.2-2, 4.6.3-1, 4.6.3-2
Sources
- CVE.orgVulnerability recordCVE-2026-111131
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-111131
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak sta
nvd.nist.gov - OSV.devPackage advisoryDEBIAN-CVE-2026-111131osv.dev