Adplug Team · Adplug · CVE-2019-14692
**Name of the Vulnerable Software and Affected Versions**
AdPlug version 2.3.1
**Description**
The issue is a heap-based buffer overflow in the `load()` function of the `CmkjPlayer` class, located in the `mkj.cpp` file.
**Recommendations**
For AdPlug version 2.3.1, consider avoiding the use of the `load()` function in the `CmkjPlayer` class until a patch is available. As a temporary workaround, restricting access to the `mkj.cpp` file or the `CmkjPlayer` class may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.