CVE-2025-61043

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This vulnerability may result in a crash or expose sensitive data.

Published 2025-10-28. Last modified 2026-06-17.