CVE-2019-14690: Adplug Project Adplug

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

AdPlug 2.3.1 has a heap-based buffer overflow in CxadbmfPlayer::__bmf_convert_stream() in bmf.cpp.

Affected products

• Adplug Project Adplug: version 2.3.1 only
• Fedoraproject Fedora: version 32 only; version 33 only

Published 2019-08-06. Last modified 2026-06-17.