AdPlug 2.3.1 has multiple heap-based buffer overflows in CmtkLoader::load() in mtk.cpp.
adplug project adplug 2.3.1
fedoraproject fedora 32
fedoraproject fedora 33