Stack Out-of-Bounds Write in libADLMIDI MIDI Player

Executive Summary

libADLMIDI 1.6.2 through 1.6.2.1 has an off-by-one stack out-of-bounds write in BW_MidiSequencer. Attackers can exploit this by providing a crafted MIDI file with a note-on status 0x9F and note value 0x7F via adl_openFile() or adl_openData(). This corrupts stack memory, potentially crashing the hosting media player or game engine.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires analyzing MIDI files processed by libADLMIDI 1.6.2 through 1.6.2.1. Check for crashes when opening MIDI files with note-on status 0x9F and note value 0x7F. Monitor logs for stack corruption errors in applications using libADLMIDI.

Useful 0 Not Useful 0

Impact Analysis

Exploitation requires user interaction to open a malicious MIDI file. Successful attacks may crash applications using libADLMIDI, cause denial of service, or lead to undefined behavior like stack corruption. The impact depends on the host application's robustness and security measures.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA. The issue is a stack out-of-bounds write in a MIDI file parser, which could lead to crashes or undefined behavior in applications using libADLMIDI. Compliance impacts would only occur if the affected software processes or stores personal data in media files, but the vulnerability itself does not inherently violate these standards.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade libADLMIDI to version 1.6.3 or later which fixes the off-by-one error. If upgrading is not possible, avoid processing untrusted MIDI files or implement strict input validation for MIDI files before passing them to libADLMIDI functions.

Useful 0 Not Useful 0