CVE-2026-110877 Details
Description
AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmo_unpacker::decrypt(), opened via CAdPlug::factory, to read bytes beyond packed_module and potentially crash the application.
A heap out-of-bounds read vulnerability has been identified in AdPlug versions through 2.4, specifically within the TwinTeam DMO loader. This vulnerability arises in the 'CdmoLoader::load()' function, located in 'src/dmo.cpp'. Attackers can exploit this issue by supplying a truncated TwinTeam DMO file, allowing them to read beyond the allocated heap memory. The exploitation involves crafting a 12- or 13-byte file that passes through a weak checksum verification, ultimately leading to a read of bytes beyond the intended allocation and potentially causing a crash in the application.
Users can be advised to update to AdPlug versions after 2.4, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AdPlug | <= 2.4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |