Adplug Project Adplug — known CVE vulnerabilities

Every CVE whose affected-product data names Adplug Project Adplug, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2018-17825 — CVSS 9.8 (critical): An issue was discovered in AdPlug 2.3.1. There are several double-free vulnerabilities in the CEmuopl class in emuopl.cpp because of a…
• CVE-2019-15151 — CVSS 9.8 (critical): AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
• CVE-2019-14691 — CVSS 8.8 (high): AdPlug 2.3.1 has a heap-based buffer overflow in CdtmLoader::load() in dtm.cpp.
• CVE-2019-14692 — CVSS 8.8 (high): AdPlug 2.3.1 has a heap-based buffer overflow in CmkjPlayer::load() in mkj.cpp.
• CVE-2019-14732 — CVSS 8.8 (high): AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
• CVE-2019-14733 — CVSS 8.8 (high): AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
• CVE-2019-14734 — CVSS 8.8 (high): AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
• CVE-2019-14690 — CVSS 8.8 (high): AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.