Read the docs

Libxmp

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Libxmp records in CISA KEV

No Libxmp vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74915 CVE-2026-111131

Off-by-one stack out-of-bounds read in libxmp P61A depacker

Priority MEDIUM 64

libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00197 Published 2026-10-15 No fix listed CWE-125
TI-2025-29797 CVE-2025-47256 · GHSA-vg32-cm75-rjr5

Integer underflow in Libxmp

Priority MEDIUM 58

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.

CVSS 3.1MEDIUM 5.6 Local No auth No interaction EPSS 0.00305 Published 2025-05-06 No fix listed CWE-191
Open these records in search →