Uade
Monthly
Out-of-bounds read in UADE through 3.05 crashes applications that probe or play attacker-supplied Amiga module files, because an unsigned length subtraction in uade_filemagic() wraps around on deliberately short inputs. The malformed module must be small enough to slip past the format-probe bounds checks in amifilemagic.c yet trigger the bufsize underflow, after which the code reads far past the end of the buffer. Impact is limited to a denial of service, typically a segmentation fault that terminates the host player or library consumer; the attack requires the crafted file to be opened locally and the user to trigger the probe/playback path (CVSS:3.1/AV:L/PR:N/UI:R, availability-only), with no code execution, privilege gain, or data disclosure. The affected software is a niche Amiga emulation/audio library with limited deployment, so real-world risk is moderate; no public exploit identified at time of analysis, and the CVE is not in CISA KEV.
Out-of-bounds read in UADE through 3.05 crashes applications that probe or play attacker-supplied Amiga module files, because an unsigned length subtraction in uade_filemagic() wraps around on deliberately short inputs. The malformed module must be small enough to slip past the format-probe bounds checks in amifilemagic.c yet trigger the bufsize underflow, after which the code reads far past the end of the buffer. Impact is limited to a denial of service, typically a segmentation fault that terminates the host player or library consumer; the attack requires the crafted file to be opened locally and the user to trigger the probe/playback path (CVSS:3.1/AV:L/PR:N/UI:R, availability-only), with no code execution, privilege gain, or data disclosure. The affected software is a niche Amiga emulation/audio library with limited deployment, so real-world risk is moderate; no public exploit identified at time of analysis, and the CVE is not in CISA KEV.