Search CVE reports
1 – 10 of 16 results
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS...
2 affected packages
libmodplug, gst-plugins-bad0.10
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libmodplug | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gst-plugins-bad0.10 | Not in release | Not in release | Not in release | — | — |
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can supply a crafted DSM file with over 240 PATT...
2 affected packages
libmodplug, gst-plugins-bad0.10
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libmodplug | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gst-plugins-bad0.10 | Not in release | Not in release | Not in release | — | — |
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes...
1 affected package
libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libmodplug | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Not in release |
libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp. The function validates only the upper bound of its sample index against MAXSMP and then subtracts one before indexing the 191-byte...
2 affected packages
libmodplug, gst-plugins-bad0.10
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libmodplug | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| gst-plugins-bad0.10 | Not in release | Not in release | Not in release | — | — |
Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash)...
2 affected packages
gst-plugins-bad0.10, libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-bad0.10 | — | — | — | — | Not in release |
| libmodplug | — | — | — | — | Not affected |
Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which...
2 affected packages
gst-plugins-bad0.10, libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-bad0.10 | — | — | — | — | Not in release |
| libmodplug | — | — | — | — | Not affected |
Some fixes available 4 of 6
Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted AMS...
2 affected packages
gst-plugins-bad0.10, libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-bad0.10 | — | — | — | — | — |
| libmodplug | — | — | — | — | — |
Some fixes available 4 of 6
Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM...
2 affected packages
gst-plugins-bad0.10, libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-bad0.10 | — | — | — | — | — |
| libmodplug | — | — | — | — | — |
Some fixes available 4 of 6
Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via a crafted...
2 affected packages
gst-plugins-bad0.10, libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-bad0.10 | — | — | — | — | — |
| libmodplug | — | — | — | — | — |
Some fixes available 4 of 6
Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with...
2 affected packages
gst-plugins-bad0.10, libmodplug
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-bad0.10 | — | — | — | — | — |
| libmodplug | — | — | — | — | — |