CVE-2017-11664
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-11664
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11664.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-11664
- Downstream
- Related
- Published
- 2017-08-17T16:29:00Z
- Modified
- 2025-09-16T06:38:32.188269Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The WMSetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
- References
Affected packages
Debian:11 / wildmidi
Package
- Name
- wildmidi
- Purl
- pkg:deb/debian/wildmidi?arch=source
Debian:12 / wildmidi
Package
- Name
- wildmidi
- Purl
- pkg:deb/debian/wildmidi?arch=source
Debian:13 / wildmidi
Package
- Name
- wildmidi
- Purl
- pkg:deb/debian/wildmidi?arch=source
Debian:14 / wildmidi
Package
- Name
- wildmidi
- Purl
- pkg:deb/debian/wildmidi?arch=source
Git / github.com/mindwerks/wildmidi
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mindwerks/wildmidi
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
wildmidi-0.*
wildmidi-0.2.2.0
wildmidi-0.2.3.0
wildmidi-0.2.3.3
wildmidi-0.2.3.4
wildmidi-0.2.3.5
wildmidi-0.3.0
wildmidi-0.3.2
wildmidi-0.3.3
wildmidi-0.4.0
wildmidi-0.4.1
Database specific
{
"vanir_signatures": [
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "src/f_hmi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"141351146277561625039154975095896373584",
"254232090882353935440735178609995392553",
"20599918566989616306151374463582397531",
"57848327071888634462554684272852728503",
"60596333353923665938859130060761487794",
"57343432820462941404261783325454411865",
"152007342498841934884471227013216892933",
"299086670282159710434401112740936115172",
"301825861999261548619047659329610589933",
"265486511930786134205048271617960963837",
"321483049606099257764204498468528390989",
"44882530341588105248323886291214711103",
"45340353830214747284546734850131054539",
"50356940890964001180016684295484455205",
"182665046250395521787262365957989574386",
"61852251944179809653588514434797746929",
"82179713164806631160264308436810202940",
"77169549067624612777075062147411002802",
"43347800113789284095348512018702212712",
"101680664409672892327274422924851963410",
"94566935609923672037397493876189048154",
"312555637812548448802023220695534250048",
"222184206187971567320249943828548902372",
"117259801994628497267680323319118456978",
"174401496235902478113372176762605391609",
"255176759582695689828066891435423087381",
"149084827432343390088746230557954381037",
"63472109329827887646495036342024272598",
"200447594012329375807994592965083105066",
"114958568041463139859567747685130123118",
"285676883074085308242777899164824841247",
"118458197099789192203030883309847846898",
"159308196959334796700050199032087512738",
"26336115671816864579141449308084843314",
"289916984747223878407590982287069387274",
"156907487750691822727381042610222320233",
"30253328000760163404062351624140919239",
"102046465290917880523488832916883533018",
"76925666770855591415422786314946368481",
"188876224194996888948792977153577690381",
"171178081484956616344646413460411701735",
"132824764464446078621551336300924292620",
"218870579924950972166230924943275912683",
"136636127851762945073244858211174023834",
"169478583191956497725390868629192486271",
"46117866874244292232369931138806093374",
"297137408525401376259567902541982688689",
"113838974136316491354134832142556930350",
"193777277520304897139491458536224120171",
"289916984747223878407590982287069387274",
"51863263256502341469596307934142215725",
"307071702087406043888160043149991845148",
"45514682112098904233357293951401936403",
"337717401987539588714258576402590531343",
"6253245861956313051842608323407953060"
]
},
"id": "CVE-2017-11664-01826a86"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "src/f_midi.c",
"function": "_WM_ParseNewMidi"
},
"digest": {
"length": 7076.0,
"function_hash": "292765676935126767621655433092196689897"
},
"id": "CVE-2017-11664-1b8f1616"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "include/internal_midi.h"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"240349596886268300509264026791978871342",
"23467033765014469800485347493635840626",
"102551864819858922092193456929454751541",
"234089177027782585333014512321519549507"
]
},
"id": "CVE-2017-11664-2659029e"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "src/f_hmp.c",
"function": "_WM_ParseNewHmp"
},
"digest": {
"length": 5739.0,
"function_hash": "86931989432895006916388051258591877425"
},
"id": "CVE-2017-11664-434e196c"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "src/f_hmp.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"67031983797352347151291203118380369696",
"3303456085931671045660317397287645771",
"192094503962951008668094983498118431280",
"130845171812342606176608479093982828331",
"162355509778458665191076207917834618650",
"336101010643798050264152588171186664658",
"16299432509934148513647235650215497502",
"14594477859225466290667261962040709303",
"316807840878678939854975127155618345084",
"85206073013068609218003902133468238703",
"195211333651184847926902146084768023522",
"303500600056082932061808264043737684247",
"149066777796212013333426068658957962860",
"249170833553535537768753997168507691826",
"281116004523813532989456096522950045918",
"259598118927604658834767883231673008444",
"264960202430526694605766488726657206919",
"331086963355611367549222722019521478953",
"103583659724563820817495977041244755401",
"173385872001138300419127049059286108891",
"28479828287427692106179027760795804532",
"164726023225820860294182629417227946784",
"324764377225211514231942730432183827206",
"184810810258615976610464215842648451477",
"66618658437271693143027532710734301353",
"100540389624186727476574599782169433090",
"311442127614570740676128365000242959417",
"323275795199287650293458617677726480712",
"17771157738209413858615982936916170726",
"263379928346163298409567705747199214407",
"88823897649265096997586327185686548869"
]
},
"id": "CVE-2017-11664-4ff6c114"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "src/f_xmidi.c",
"function": "_WM_ParseNewXmi"
},
"digest": {
"length": 5060.0,
"function_hash": "107815747377548526876954637397013868036"
},
"id": "CVE-2017-11664-56f914de"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "src/internal_midi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"232985231582014676728743464795540272083",
"142608653670295519470578043776370999906",
"95448357696492381026459217779317659754",
"282140124630312514272413603865838106203",
"9402400541346106242068687143732419535",
"279110710416328920021733561227991923389",
"39695844121596347003611944532860530738",
"224765172163591625545326951796557229044",
"249324873763929888353145039063271955530",
"117867706238520284010317281218876327986",
"105974787213431374526611953409100428406",
"151421721969137499465873569410616305146",
"253707298310576415918187887705119289657",
"272533203646524400764623962237111643076",
"263687732529742214634233343664847976014",
"173101145805100037207221580852785405649",
"148652500486838114645841765975751356849",
"242510090303981423413849200404823737698",
"105463379483447756488605514901653695868",
"21610171315496013210967380548682313529",
"80978134131748510608801049014186360063",
"205094770198681295142667547188782764548",
"292038935945560485456939034581556906140",
"197970800707119263673796925130637789779",
"261220379805619551673291011680165841013",
"270116080470820395744330801095712754087",
"287857713856107226853575085396719205871",
"23822523309814445507217160975420857855",
"305384259419811782037586877780437389193",
"179364477235811356786122484378693897665",
"110916335535676428291017963698918776842",
"203050227862658759956278409113952450987",
"38802677648541637060421979664325516606",
"294355431094038121131806458825491600267",
"84365996671142789866053865865931047729",
"115396553713500183786637741387142386715",
"333328653911786149314302618283770757416",
"274035570192034759608050095783591680984",
"174803368506324447644800752960766905945",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"328168762085521963236197501319696086858",
"132264462106672922925971102465585337796",
"329480186023408175643894669514310304768",
"160117545066612846577058467194445290463",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"154094392091610978810601951952740487549",
"63500615023027284448539604805217230260",
"266736551076436600343179815757096965088",
"114506932839299983574639022412909178603",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"328168762085521963236197501319696086858",
"132264462106672922925971102465585337796",
"329480186023408175643894669514310304768",
"2114813831490344174808375268777907544",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"328168762085521963236197501319696086858",
"132264462106672922925971102465585337796",
"329480186023408175643894669514310304768",
"59954335498346947201207548680278222329",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"328168762085521963236197501319696086858",
"132264462106672922925971102465585337796",
"329480186023408175643894669514310304768",
"60193750874489417757638926424234417256",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"328168762085521963236197501319696086858",
"132264462106672922925971102465585337796",
"329480186023408175643894669514310304768",
"58760509767330544901618337058509396511",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"339713719740774791653650997188575473390",
"274057390769673259829744374577055527032",
"328168762085521963236197501319696086858",
"132264462106672922925971102465585337796",
"329480186023408175643894669514310304768",
"206583671706375071369467422289460173899",
"195607023254376114411009884829708489485",
"47140025292284312248051979250749806824",
"308814287031599821212623222801880134020",
"241191636543700604797217243504252085086",
"68996816571159511650552745933971230928",
"189455665816939569175140026807908814526",
"334926607513703423763966370876210195076",
"194993032461446163350289714646139664019",
"26014887005259583744331043473612924074",
"176635979797285415401432878958182102120",
"306765932859639524539289719959230176047",
"65875040391246433847017837845025544368",
"67320505834651209490037487932548769974",
"325749069915414379157742954954374576907",
"173547207891283838348636848596144862543",
"179906117082707491217139460715129367879",
"21908525401279632452441024289725799634",
"68786023323521005492890269740680081664",
"12389209997787980744012187814660455853",
"333718797830971752724730003628755828204",
"188489030128429670807275809032462509237",
"314498269471595062181635889810236201732",
"118073070525636757359673367181121094249",
"183451612855126251236311521560718676122",
"291970639490952846262508268630681273041",
"325804588082782062556457173718549676683",
"173640143974137631837260490996799560932",
"113373831875946498185226260007497072156",
"252756665449329953414040793995621120380",
"260502021419487818932613558950340279283",
"164455357036785199002472398850656047442",
"48514725224243495497856726896475594903",
"58877470455285023078890287522842279000",
"184033923110893700667280545978201464259",
"216901671907122518194231045529945495571",
"303993478717682312672060362302027229371",
"97504716411989168386717519724836998629",
"64978700048834227005259445016364616",
"173640143974137631837260490996799560932",
"129028447739940973472274108121253743923",
"197367212939846511293466602155366206796",
"11622310106392217494364894789389708913",
"57976169818595068752519528023650783669",
"180890069669317974654437228311355079786",
"173044231112937832102090123172582534656",
"77284374325764567652393860852948722872",
"168593535587235538550291626403014536277",
"79514298824226988648272696995083593944"
]
},
"id": "CVE-2017-11664-5d9393c3"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "src/internal_midi.c",
"function": "_WM_SetupMidiEvent"
},
"digest": {
"length": 7415.0,
"function_hash": "64957734829486547105236475810800561991"
},
"id": "CVE-2017-11664-6f918b04"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "src/f_xmidi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"48685966033372181517930884011757407163",
"24459856794901472844565823513820354601",
"214478028729068990695509847715315215720",
"239582413292450093166578342929871825281"
]
},
"id": "CVE-2017-11664-722c1e84"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "src/f_mus.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"115362588393299484017026622388611308159",
"109879554697335468280146797519457100743",
"288895927221548445544034222232390712229",
"157528642727650210224615388726290862431",
"26982526106202337162626447459470688748",
"129881007100362124534886472997368346201",
"306194869388430092094330725855024970865",
"143478566924020956357921278761762893549"
]
},
"id": "CVE-2017-11664-7d3d8c37"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "src/f_hmi.c",
"function": "_WM_ParseNewHmi"
},
"digest": {
"length": 6160.0,
"function_hash": "263724555074901050502763607281820245502"
},
"id": "CVE-2017-11664-8d37d04d"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "src/f_midi.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"116516709355494710223054538068369780589",
"44959657369594479634166381288676913837",
"222033699935233590796282731170911565198",
"76381277114271900676011861289380652451",
"52158566494861331800073854602304285170",
"254081041692273518356063061024046830138",
"183689567147557373712974238535089601521",
"77065072538992201072150041306138005432",
"186470483442388613544294078650970633867",
"306469420349350112785035622022880895178",
"166525872084823903452868064066238529018",
"285099691323179974021171110065659800254",
"146217595881104739959834499906204264683",
"294463264924769980853338993532878690253",
"35236878624557157946962210809497438322",
"141444031863013425589763298090781356857",
"214003294176409193841770994235870988529",
"311273363838830742636114027463815788065",
"107461153011690827462276760067093304682",
"218497755080452257575895819610972926772",
"65914859638487342993607622576274852580",
"252989453593506030203003024450363493299",
"87209661124196726719543352887874904613",
"171661751468907872556557606981146133001",
"331777528158789544597979626057276077996",
"32400562427443365080130410842057388109",
"44914956615092196844537096028805580672",
"246208685432356010345788996361440352869",
"148129065317299033611575215428003246276",
"315329321779265587517161808991465552326",
"285760667863482788337375565832537981949",
"94028846090048161226526177610464943034",
"163196615939442350164888697854567810111",
"161514002850540477421974738998707754116",
"73087765514544611248889343840167108687",
"268387001820796149638951935706992761764",
"332216794278327143146205938285112958910",
"189950913283037849105706148992379143716",
"205314728384993238052612102802682035049",
"241800243512009300363462097705363121061",
"102073176071331637155938054151757279209",
"312867105774613384641300177551699799632",
"240932913612044246325144268870673090670",
"329536551482337598314785827997917520616",
"336856090314523904209573957993743433582",
"325171648758271212135489901363474963501",
"319302517040755328404396055587196711998",
"48015015226666174067868668687877252436",
"254173781015810296153233557525750933590",
"50867150298625450566166666464181425705",
"153368631249103529511123437459312291382",
"264458133857942373125839773993921951540",
"238453549570621380416979302571680359084",
"310891047425206724502842220439455863417",
"60697695453829942816176996305811826943",
"279499190330340908369034380552900027618",
"316616302457999862443021821623796688609",
"339570735669460759472364027985768622513",
"308532022509756392336245490189308613585",
"328705955090116041231988126622552248873",
"138663597624570846598577962051016879357",
"174044445208091567519634404170836194542",
"247431761622833475558853658994816003745",
"140151705422960127375491758595564581497",
"72097740957468042062807499089149423198",
"305765300884779278799913925857160180709",
"140694150546486721420736080483117224977",
"298122088801866145704481236463769368733",
"78492681091079558520861062019108582953",
"21141690945188943294560960853938374672",
"153368631249103529511123437459312291382",
"264458133857942373125839773993921951540",
"316616302457999862443021821623796688609",
"290226537980494556926756815596431875622",
"131630667134447138870647027726998390218",
"140442121006979194593203238358573966942",
"15399108366372653968503377113548353101",
"138663597624570846598577962051016879357",
"174044445208091567519634404170836194542",
"247431761622833475558853658994816003745",
"140151705422960127375491758595564581497",
"72097740957468042062807499089149423198",
"261988731048080666526799098723135286134",
"286401219199440865809297139948000105880",
"190224680610809903545721765208998234500",
"145750658926128739845057627671745952440",
"215502019820685347072087193748682797132",
"150015387400988845068829707019559232997",
"37585174686818510309053756185304637759"
]
},
"id": "CVE-2017-11664-ae86921c"
},
{
"source": "https://github.com/mindwerks/wildmidi/commit/ad6d7cf88d6673167ca1f517248af9409a9f1be1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "src/f_mus.c",
"function": "_WM_ParseNewMus"
},
"digest": {
"length": 6009.0,
"function_hash": "256968562929709650087634459246427830624"
},
"id": "CVE-2017-11664-f8356382"
}
]
}