Milkytracker Project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Milkytracker Project records in CISA KEV

No Milkytracker Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Milkytracker · all components

TI-2019-10810 CVE-2019-14497 · GHSA-crmr-7fr2-cw8r

LOW 37

ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01387 Published 2019-08-01 No fix listed CWE-787

TI-2019-10809 CVE-2019-14496 · GHSA-99qg-7j2m-hhr7

LOW 37

LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01387 Published 2019-08-01 No fix listed CWE-787

TI-2022-15710 CVE-2022-34927 · GHSA-f624-83xq-9xr8

LOW 34

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-08-03 No fix listed CWE-787

TI-2019-10783 CVE-2019-14464 · GHSA-5vvx-pmrp-7f4w

LOW 28

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01344 Published 2019-07-31 No fix listed CWE-787

TI-2020-12247 CVE-2020-15569 · GHSA-h26x-cv2x-chj2

LOW 26

PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00746 Published 2020-07-06 No fix listed CWE-416