{"id":"CVE-2017-1000418","details":"The WildMidi_Open function in WildMIDI since commit d8a466829c67cacbb1700beded25c448d99514e5 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.","modified":"2026-07-08T11:47:34.373603Z","published":"2018-01-02T18:29:00.200Z","references":[{"type":"FIX","url":"https://github.com/Mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab"},{"type":"EVIDENCE","url":"https://github.com/Mindwerks/wildmidi/issues/178"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mindwerks/wildmidi","events":[{"introduced":"0"},{"last_affected":"18ff5629cf6786e405ab0008dbdc34973b99c9c8"},{"fixed":"814f31d8eceda8401eb812fc2e94ed143fdad0ab"}],"database_specific":{"cpe":"cpe:2.3:a:mindwerks:wildmidi:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"0.4.1"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["wildmidi-0.4.1","wildmidi-0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-1000418.json","vanir_signatures_modified":"2026-07-08T11:47:34Z","vanir_signatures":[{"target":{"file":"src/wildmidi_lib.c"},"deprecated":false,"digest":{"line_hashes":["205906475956759771517575650363802695579","144880987095528794820026108554072752470","264261122918070933570567576939443223129","323863213699465470798880491693950867844","162579612758107997605674040298359510136","44812330657807925501308644140153498869","75370133918492433436571896974181436429","206327360777536001590023323705444654939"],"threshold":0.9},"id":"CVE-2017-1000418-1771c38a","signature_type":"Line","signature_version":"v1","source":"https://github.com/mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab"},{"target":{"function":"WildMidi_OpenBuffer","file":"src/wildmidi_lib.c"},"deprecated":false,"digest":{"function_hash":"1032761876875532413927771300782462536","length":1091},"id":"CVE-2017-1000418-4b55f61e","signature_type":"Function","signature_version":"v1","source":"https://github.com/mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab"},{"target":{"file":"src/wildmidi_lib.c","function":"WildMidi_Open"},"deprecated":false,"digest":{"length":1070,"function_hash":"131276105456305404948364463629928965111"},"id":"CVE-2017-1000418-f986efb3","signature_type":"Function","signature_version":"v1","source":"https://github.com/mindwerks/wildmidi/commit/814f31d8eceda8401eb812fc2e94ed143fdad0ab"}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}