Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Openmpt Subscribe
Total 11 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-14383 2 Openmpt, Opensuse 2 Libopenmpt, Leap 2023-03-03 4.3 MEDIUM 6.5 MEDIUM
J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
CVE-2019-14380 2 Debian, Openmpt 2 Debian Linux, Libopenmpt 2023-03-03 4.3 MEDIUM 6.5 MEDIUM
libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.
CVE-2018-20860 2 Openmpt, Opensuse 2 Libopenmpt, Leap 2023-03-03 4.3 MEDIUM 6.5 MEDIUM
libopenmpt before 0.3.13 allows a crash with malformed MED files.
CVE-2019-14382 1 Openmpt 1 Libopenmpt 2023-03-02 4.3 MEDIUM 6.5 MEDIUM
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
CVE-2018-6611 1 Openmpt 2 Libopenmpt, Openmpt 2020-10-15 6.8 MEDIUM 8.8 HIGH
soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
CVE-2018-10017 1 Openmpt 2 Libopenmpt, Openmpt 2020-10-15 4.3 MEDIUM 6.5 MEDIUM
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
CVE-2019-17113 1 Openmpt 1 Libopenmpt 2020-08-01 7.5 HIGH 9.8 CRITICAL
In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.
CVE-2018-20861 1 Openmpt 1 Libopenmpt 2019-09-28 4.3 MEDIUM 6.5 MEDIUM
libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
CVE-2019-14381 1 Openmpt 1 Libopenmpt 2019-08-05 5.0 MEDIUM 7.5 HIGH
libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot.
CVE-2018-11710 1 Openmpt 1 Libopenmpt 2018-07-16 6.8 MEDIUM 8.8 HIGH
soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
CVE-2017-11311 1 Openmpt 2 Libopenmpt, Openmpt 2017-07-26 6.8 MEDIUM 7.8 HIGH
soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.