Out-of-Bounds Read in AdPlug XSM File Handling

Executive Summary

This vulnerability is an out-of-bounds read in AdPlug version 2.4 and earlier. It occurs in the CxsmPlayer::play_note function in src/xsm.cpp when a negative note index is provided. Attackers can craft a malicious XSM file with a specific signature and song byte value to trigger a global buffer overflow during playback, potentially crashing the application.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect systems running AdPlug versions 2.4 or earlier for XSM files with the 'ofTAZ!' signature and song bytes of 0x80 or higher. Check for crashes during media playback or unusual memory access patterns in applications using AdPlug.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability may allow attackers to crash applications using AdPlug by exploiting a buffer overflow. If exploited, it could lead to denial of service or potentially arbitrary code execution, depending on the application's context and memory layout.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability is an out-of-bounds read issue in AdPlug that could allow attackers to read memory before a buffer during XSM file playback. It does not directly relate to data confidentiality or integrity requirements in GDPR or HIPAA. However, if exploited, it could lead to application crashes, potentially causing denial-of-service scenarios that might disrupt systems handling sensitive data. Compliance impact would depend on whether such disruptions affect systems processing personal health or user data.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update AdPlug to the latest version beyond 2.4. If updating is not possible, restrict access to XSM files from untrusted sources and monitor applications using AdPlug for crashes or memory corruption.

Useful 0 Not Useful 0