Browse CVEs

CRITICAL 9.8 CVE-2019-17113 In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths… Libopenmpt 0.3.19 / 0.4.9+ Fix from $2,3002019-10-04 MEDIUM 6.5 CVE-2018-20860 libopenmpt before 0.3.13 allows a crash with malformed MED files. Libopenmpt 0.3.13+ Fix from $1,6002019-07-30 MEDIUM 6.5 CVE-2018-20861 libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files. Libopenmpt 0.3.11+ Fix from $1,6002019-07-30 MEDIUM 6.5 CVE-2019-14382 DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs. Libopenmpt 0.4.2+ Fix from $1,6002019-07-30 MEDIUM 6.5 CVE-2019-14383 J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs. Libopenmpt 0.4.2+ Fix from $1,6002019-07-30 HIGH 7.5 CVE-2019-14381 libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note m… Libopenmpt 0.4.3+ Fix from $1,9502019-07-30 HIGH 8.8 CVE-2018-11710 soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified o… Libopenmpt 0.3.9+ Fix from $1,9502018-06-04 MEDIUM 6.5 CVE-2018-10017 soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read… Libopenmpt 0.3.8 / 1.27.07.00+ Fix from $1,6002018-04-11 HIGH 8.8 CVE-2018-6611 soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file. Libopenmpt 0.3.6+ Fix from $1,9502018-02-04 HIGH 7.8 CVE-2017-11311 soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary… Libopenmpt after 1.26.12.00 Fix from $1,9502017-07-17