AdPlug 2.3.1 has a double free in the Cu6mPlayer class in u6m.h.
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Adplug | Adplug_project | 2.3.1 (including) | 2.3.1 (including) |
| Adplug | Ubuntu | bionic | * |
| Adplug | Ubuntu | disco | * |
| Adplug | Ubuntu | eoan | * |
| Adplug | Ubuntu | esm-apps/bionic | * |
| Adplug | Ubuntu | esm-apps/focal | * |
| Adplug | Ubuntu | esm-apps/xenial | * |
| Adplug | Ubuntu | focal | * |
| Adplug | Ubuntu | trusty | * |
| Adplug | Ubuntu | upstream | * |
| Adplug | Ubuntu | xenial | * |