Every CVESearch/Get API key

CVE-2011-2911

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8...

6.8 MediumFix available

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Exploit likelihood

4.30%Down 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.8

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Record
CVE-2011-2911
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE ListNo score

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Record
CVE-2011-2911
Updated
2026-11-02
EUVDEUVD-2011-2884No score

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Record
EUVD-2011-2884
Updated
2026-11-03
GitHub AdvisoriesGHSA-c5vv-mhrm-6wxgNo score

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8...

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Record
GHSA-c5vv-mhrm-6wxg
Updated
2026-11-02
OSVNo score

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Record
CVE-2011-2911
Updated
2026-11-02
OSVDEBIAN-CVE-2011-2911No score

Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.

Record
DEBIAN-CVE-2011-2911
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libmodplug
Debian:12
before 1:0.8.8.4-1
1:0.8.8.4-1
libmodplug
Debian:13
before 1:0.8.8.4-1
1:0.8.8.4-1
libmodplug
Debian:14
before 1:0.8.8.4-1
1:0.8.8.4-1
libmodplug
Debian:6.0
From an advisory covering 6 CVEs
before 1:0.8.8.1-1+squeeze2, plus listed versions
1:0.8.8.1-11:0.8.8.1-1+squeeze1
1:0.8.8.1-1+squeeze2
gstreamer-plugins
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::as
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::desktop
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
Show 6 moreShow less
Affected packages
PackageAffectedFixed
gstreamer-plugins
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::es
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-debuginfo
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4
gstreamer-plugins-devel
Red Hat:enterprise_linux:4::ws
From an advisory covering 5 CVEs
before 0:0.8.5-1.EL.4
0:0.8.5-1.EL.4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-2911 is a medium vulnerability (CVSS 6.8) in Konstanty Bialkowski Libmodplug, published February 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.30%, the 91st percentile. Fixed in libmodplug 1:0.8.8.4-1.

References

Show 42 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open