What is GHSA-874w-m2v2-mj64?

GHSA-874w-m2v2-mj64 is a security advisory published by GitHub Security Advisories with Critical severity. Double Free in Adplug

Which CVE IDs does GHSA-874w-m2v2-mj64 cover?

GHSA-874w-m2v2-mj64 covers the following CVE IDs: CVE-2019-15151. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-874w-m2v2-mj64?

GHSA-874w-m2v2-mj64 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-874w-m2v2-mj64?

GHSA-874w-m2v2-mj64 affects 1 product, including: nuget/adplug:\u003c= 2.3.1.

GHSA-874w-m2v2-mj64CriticalCVSS 9.8

Double Free in Adplug

Vendor

GitHub Security Advisories

Published

March 29, 2021

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2019-15151 →

📋 Description

AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.

🎯 Affected products1

nuget/adplug:<= 2.3.1

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2019-15151
https://github.com/adplug/adplug/issues/91
https://github.com/adplug/adplug/commit/1a282a486a8e33fef3e15998bf6408d3515dc07e
https://github.com/miller-alex/adplug/commit/8abb9328bf27dcbdafc67ade3e75af0ffd8f7633
https://lists.fedoraproject.org/archives/list/[email protected]/message/Q32A64R2APAC5PXIMSYIEFDQX5AD4GAS/
https://lists.fedoraproject.org/archives/list/[email protected]/message/U3PW6PLDTPSQQRHKTU2FB72SUB4Q66NE/
https://github.com/advisories/GHSA-874w-m2v2-mj64