Vulnerabilities

TI-2026-76159 CVE-2026-112007 · GHSA-qfh4-g83h-4vcx

Heap out-of-bounds write in Schism Tracker ULT loader

MEDIUM 64

Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt_ult_load_song() in fmt/ult.c that fails to clamp the one-byte sample count to MAX_SAMPLES.

CVSS 4.0MEDIUM 6.9 Local No auth User interaction EPSS 0.00128 Published 2026-10-18 No fix listed CWE-787

TI-2021-12119 CVE-2021-32419 · GHSA-23ph-fhq5-g5v8

An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain…

MEDIUM 63

An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmt_mtm_load_song function in fmt/mtm.c.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00615 Published 2023-02-17 No fix listed CWE-787

TI-2019-10821 CVE-2019-14523 · GHSA-g8jp-jv8p-3qr4

An issue was discovered in Schism Tracker through 20190722.

LOW 37

An issue was discovered in Schism Tracker through 20190722.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01248 Published 2019-08-02 No fix listed CWE-191

TI-2019-10822 CVE-2019-14524 · GHSA-vc6v-5gxv-xp37

An issue was discovered in Schism Tracker through 20190722.

LOW 37

An issue was discovered in Schism Tracker through 20190722.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01338 Published 2019-08-02 No fix listed CWE-787

TI-2019-10784 CVE-2019-14465 · GHSA-r87q-78r4-4ch6

fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.

LOW 37

fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01225 Published 2019-07-31 No fix listed CWE-787

Vulnerabilities

Filters

Heap out-of-bounds write in Schism Tracker ULT loader

An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain…

An issue was discovered in Schism Tracker through 20190722.

An issue was discovered in Schism Tracker through 20190722.

fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.