Read the docs
TI-2005-00020 Aliases CVE-2005-0020GHSA-9wjx-vxh5-8xrx

Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.

Priority LOW 32Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.

Why it matters now

EPSS 0.00513 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 32

CPEVersionsRoleVendor
cpe:2.3:a:playmidi:playmidi:2.3.1:*:*:*:*:*:*:*2.3.1VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.2:*:*:*:*:*:*:*2.3.2VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.3:*:*:*:*:*:*:*2.3.3VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.4:*:*:*:*:*:*:*2.3.4VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.5:*:*:*:*:*:*:*2.3.5VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.6:*:*:*:*:*:*:*2.3.6VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.7:*:*:*:*:*:*:*2.3.7VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.8:*:*:*:*:*:*:*2.3.8VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.9:*:*:*:*:*:*:*2.3.9VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.10:*:*:*:*:*:*:*2.3.10VulnerablePlaymidi
  • cpe:2.3:a:playmidi:playmidi:2.3.1:*:*:*:*:*:*:* Versions 2.3.1 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.2:*:*:*:*:*:*:* Versions 2.3.2 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.5:*:*:*:*:*:*:* Versions 2.3.5 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.6:*:*:*:*:*:*:* Versions 2.3.6 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.7:*:*:*:*:*:*:* Versions 2.3.7 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.8:*:*:*:*:*:*:* Versions 2.3.8 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.9:*:*:*:*:*:*:* Versions 2.3.9 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.10:*:*:*:*:*:*:* Versions 2.3.10 Vulnerable ·Playmidi
Show 22 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:playmidi:playmidi:2.3.11:*:*:*:*:*:*:*2.3.11VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.12:*:*:*:*:*:*:*2.3.12VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.13:*:*:*:*:*:*:*2.3.13VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.14:*:*:*:*:*:*:*2.3.14VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.15:*:*:*:*:*:*:*2.3.15VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.16:*:*:*:*:*:*:*2.3.16VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.17:*:*:*:*:*:*:*2.3.17VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.18:*:*:*:*:*:*:*2.3.18VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.19:*:*:*:*:*:*:*2.3.19VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.20:*:*:*:*:*:*:*2.3.20VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.21:*:*:*:*:*:*:*2.3.21VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.22:*:*:*:*:*:*:*2.3.22VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.23:*:*:*:*:*:*:*2.3.23VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.24:*:*:*:*:*:*:*2.3.24VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.25:*:*:*:*:*:*:*2.3.25VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.25.1:*:*:*:*:*:*:*2.3.25.1VulnerablePlaymidi
cpe:2.3:a:playmidi:playmidi:2.3.26:*:*:*:*:*:*:*2.3.26VulnerablePlaymidi
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*10.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*10.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*3.0VulnerableMandrakesoft
  • cpe:2.3:a:playmidi:playmidi:2.3.11:*:*:*:*:*:*:* Versions 2.3.11 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.12:*:*:*:*:*:*:* Versions 2.3.12 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.13:*:*:*:*:*:*:* Versions 2.3.13 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.14:*:*:*:*:*:*:* Versions 2.3.14 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.15:*:*:*:*:*:*:* Versions 2.3.15 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.16:*:*:*:*:*:*:* Versions 2.3.16 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.17:*:*:*:*:*:*:* Versions 2.3.17 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.18:*:*:*:*:*:*:* Versions 2.3.18 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.19:*:*:*:*:*:*:* Versions 2.3.19 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.20:*:*:*:*:*:*:* Versions 2.3.20 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.21:*:*:*:*:*:*:* Versions 2.3.21 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.22:*:*:*:*:*:*:* Versions 2.3.22 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.23:*:*:*:*:*:*:* Versions 2.3.23 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.24:*:*:*:*:*:*:* Versions 2.3.24 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.25:*:*:*:*:*:*:* Versions 2.3.25 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.25.1:*:*:*:*:*:*:* Versions 2.3.25.1 Vulnerable ·Playmidi
  • cpe:2.3:a:playmidi:playmidi:2.3.26:*:*:*:*:*:*:* Versions 2.3.26 Vulnerable ·Playmidi
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:* Versions 10.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86_64:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Mandrakesoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0020
  2. 2026-10-03 Alias added: GHSA-9wjx-vxh5-8xrx

References

Patch 1

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences