Vulnerabilities

TI-2022-15710 CVE-2022-34927 · GHSA-f624-83xq-9xr8

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component…

LOW 34

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-08-03 No fix listed CWE-787

TI-2020-12247 CVE-2020-15569 · GHSA-h26x-cv2x-chj2

LOW 26

PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00746 Published 2020-07-06 No fix listed CWE-416

TI-2019-10810 CVE-2019-14497 · GHSA-crmr-7fr2-cw8r

LOW 37

ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01387 Published 2019-08-01 No fix listed CWE-787

TI-2019-10809 CVE-2019-14496 · GHSA-99qg-7j2m-hhr7

LOW 37

LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01387 Published 2019-08-01 No fix listed CWE-787

TI-2019-10783 CVE-2019-14464 · GHSA-5vvx-pmrp-7f4w

LOW 28

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01344 Published 2019-07-31 No fix listed CWE-787