Vulnerability index

Browse CVEs

10 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Libopenmpt CRITICAL 9.8
CVE-2019-17113

In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths…

Fix: 0.3.19 / 0.4.9+
Fix from $2,300 2019-10-04
Libopenmpt MEDIUM 6.5
CVE-2018-20860

libopenmpt before 0.3.13 allows a crash with malformed MED files.

Fix: 0.3.13+
Fix from $1,600 2019-07-30
Libopenmpt MEDIUM 6.5
CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.

Fix: 0.3.11+
Fix from $1,600 2019-07-30
Libopenmpt MEDIUM 6.5
CVE-2019-14382

DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.

Fix: 0.4.2+
Fix from $1,600 2019-07-30
Libopenmpt MEDIUM 6.5
CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.

Fix: 0.4.2+
Fix from $1,600 2019-07-30
Libopenmpt HIGH 7.5
CVE-2019-14381

libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note m…

Fix: 0.4.3+
Fix from $1,950 2019-07-30
Libopenmpt HIGH 8.8
CVE-2018-11710

soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified o…

Fix: 0.3.9+
Fix from $1,950 2018-06-04
Libopenmpt MEDIUM 6.5
CVE-2018-10017

soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read…

Fix: 0.3.8 / 1.27.07.00+
Fix from $1,600 2018-04-11
Libopenmpt HIGH 8.8
CVE-2018-6611

soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.

Fix: 0.3.6+
Fix from $1,950 2018-02-04
Libopenmpt HIGH 7.8
CVE-2017-11311

soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary…

Fix: after 1.26.12.00
Fix from $1,950 2017-07-17