Back to Database
Status published
Critical
CVE-2018-17825
An issue was discovered in AdPlug 2.3.1. There are several...
Vulnerability Description
An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a destructor's two OPLDestroy calls, each of which frees TL_TABLE, SIN_TABLE, AMS_TABLE, and VIB_TABLE.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-17825
Credits & Attribution
No credits recorded in the NVD database.
References
- https://github.com/adplug/adplug/issues/67
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
More from adplug project
View All →CVE-2019-15151
AdPlug 2.3.1 has a double free in the Cu6mPlayer class...
Critical
9.8
CVE-2019-14734
AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in...
High
8.8
CVE-2019-14733
AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in...
High
8.8
CVE-2019-14732
AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in...
High
8.8
CVE-2019-14692
AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in...
High
8.8
Affected Vendor
adplug project
View all reports →Affected Software
adplug, fedora
Vulnerable Versions:
2.3.1, 32, 33
Timeline
Official Publish:
October 1st, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.