Priority MEDIUM 63
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files.
Vulnerabilities
15 records
TI-2026-75052 CVE-2026-111270 · GHSA-rxvf-jg5h-5fv5
libmodplug Heap Out-of-Bounds Write via CSoundFile::ReadDSM
Priority MEDIUM 64
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS.
TI-2026-70565 CVE-2026-108577 · GHSA-252h-2265-gp6c
Resource consumption in libmodplug ABC Music Format parser
Priority LOW 24
A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1.
TI-2026-53134 CVE-2026-75904 · GHSA-prc8-cg98-hxwc
libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped via Crafted MIDI File
Priority MEDIUM 55
libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp.
TI-2013-03705 CVE-2013-4234 · GHSA-2qqr-78hq-cvh8
Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord…
Priority LOW 37
Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and…
TI-2013-03704 CVE-2013-4233 · GHSA-6g29-w75w-r6q5
Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and…
Priority LOW 37
Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC f…
TI-2011-02568 CVE-2011-2915 · GHSA-5fmx-q427-7v37
Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug…
Priority LOW 37
Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a cr…
TI-2011-02567 CVE-2011-2914 · GHSA-cgc2-53vh-7rq5
Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug…
Priority LOW 37
Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a cra…
TI-2011-02566 CVE-2011-2913 · GHSA-rrc2-4wm9-xw5p
Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug…
Priority LOW 37
Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via…
TI-2011-02565 CVE-2011-2912 · GHSA-7wj6-grc4-qcxr
Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in…
Priority LOW 37
Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M…
TI-2011-02564 CVE-2011-2911 · GHSA-c5vv-mhrm-6wxg
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug…
Priority LOW 37
Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which…
TI-2011-01540 CVE-2011-1761 · GHSA-ww46-w65w-8q48
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro…
Priority MEDIUM 43
Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly ex…
TI-2011-01393 CVE-2011-1574 · GHSA-65jc-w8gm-x2mq
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before…
Priority MEDIUM 59
Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.
TI-2009-01434 CVE-2009-1513 · GHSA-h3rv-m7w5-j5w5
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7…
Priority LOW 37
Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
TI-2009-01362 CVE-2009-1438 · GHSA-v7cc-2p5c-5943
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug…
Priority MEDIUM 40
Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-dependent attackers to execute arbitrary code…