Vulnerability · Published Oct 15, 2026 · Assigned by VulnCheck
CVE-2026-111166libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
Medium 5.5
In plain English
A medium-severity out-of-bounds read in libmikmod from sezero. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libmikmod | no fix listed | DEBIAN-CVE-2026-111166 |
| Debian:13 | libmikmod | no fix listed | DEBIAN-CVE-2026-111166 |
| Debian:14 | libmikmod | 3.3.16-1 | DEBIAN-CVE-2026-111166 |
| Ubuntu:22.04:LTS | libmikmod | no fix listed | UBUNTU-CVE-2026-111166 |
| Ubuntu:24.04:LTS | libmikmod | no fix listed | UBUNTU-CVE-2026-111166 |
| Ubuntu:26.04:LTS | libmikmod | no fix listed | UBUNTU-CVE-2026-111166 |
| Ubuntu:26.10 | libmikmod | no fix listed | UBUNTU-CVE-2026-111166 |
Affected products (as reported)
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
References
- https://hackmd.io/@haind-pwn/libmikmod-mtm-imf-loader-oob-read technical-description
- https://github.com/sezero/mikmod/blob/6e658155f7e6b394a288dac796ba572634553fad/libmikmod/loaders/load_imf.c#L702-L712 technical-description
- https://github.com/sezero/mikmod product
- VulnCheck Advisory: libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load third-party-advisory