AdPlug 2.3.1 has multiple heap-based buffer overflows in Ca2mLoader::load() in a2m.cpp.
adplug project adplug 2.3.1
fedoraproject fedora 32
fedoraproject fedora 33