Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Libxmp Clear all filters
TI-2026-74915 CVE-2026-111131

Off-by-one stack out-of-bounds read in libxmp P61A depacker

Priority MEDIUM 64

libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00197 Published 2026-10-15 No fix listed CWE-125
TI-2025-29797 CVE-2025-47256 · GHSA-vg32-cm75-rjr5

Integer underflow in Libxmp

Priority MEDIUM 58

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.

CVSS 3.1MEDIUM 5.6 Local No auth No interaction EPSS 0.00305 Published 2025-05-06 No fix listed CWE-191