AdPlug 2.3.1 has multiple heap-based buffer overflows in CradLoader::load() in rad.cpp.
adplug project adplug 2.3.1
fedoraproject fedora 32
fedoraproject fedora 33