Is CVE-2026-111161 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111161?

CVE-2026-111161 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-111161

Description

libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI files. Attackers can supply a MIDI file with a note-on using status 0x9F and note 0x7F through adl_openFile() or adl_openData() to crash the hosting media player or game engine.