Openmpt
Libopenmpt: vulnerabilidades y CVE
Libopenmpt tiene 11 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-17113 | Crítica (9.8) | 2.8% | — | 4 oct 2019 | In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer… |
| CVE-2019-14383 | Media (6.5) | 1.3% | — | 30 jul 2019 | J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs. |
| CVE-2019-14382 | Media (6.5) | 1.2% | — | 30 jul 2019 | DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs. |
| CVE-2019-14380 | Media (6.5) | 0.94% | — | 30 jul 2019 | libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files. |
| CVE-2018-20861 | Media (6.5) | 1.1% | — | 30 jul 2019 | libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files. |
| CVE-2018-20860 | Media (6.5) | 1.3% | — | 30 jul 2019 | libopenmpt before 0.3.13 allows a crash with malformed MED files. |
| CVE-2019-14381 | Alta (7.5) | 1.4% | — | 30 jul 2019 | libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot. |
| CVE-2018-11710 | Alta (8.8) | 2.1% | — | 4 jun 2018 | soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near… |
| CVE-2018-10017 | Media (6.5) | 2.1% | — | 11 abr 2018 | soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops. |
| CVE-2018-6611 | Alta (8.8) | 1.3% | — | 4 feb 2018 | soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file. |
| CVE-2017-11311 | Alta (7.8) | 1.7% | — | 17 jul 2017 | soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same… |