The WMParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a crafted mid file.
{
"binaries": [
{
"binary_name": "libwildmidi-config",
"binary_version": "0.2.3.4-2.1ubuntu3"
},
{
"binary_name": "libwildmidi-dev",
"binary_version": "0.2.3.4-2.1ubuntu3"
},
{
"binary_name": "libwildmidi1",
"binary_version": "0.2.3.4-2.1ubuntu3"
},
{
"binary_name": "wildmidi",
"binary_version": "0.2.3.4-2.1ubuntu3"
}
]
}
{
"binaries": [
{
"binary_name": "libwildmidi-config",
"binary_version": "0.3.8-2ubuntu0.1~esm1"
},
{
"binary_name": "libwildmidi-dev",
"binary_version": "0.3.8-2ubuntu0.1~esm1"
},
{
"binary_name": "libwildmidi1",
"binary_version": "0.3.8-2ubuntu0.1~esm1"
},
{
"binary_name": "wildmidi",
"binary_version": "0.3.8-2ubuntu0.1~esm1"
}
],
"availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}