Openmpt

11 CVEs across 2 Openmpt products. Browse Openmpt vulnerabilities, severities, and proof-of-concept exploits.

Openmpt products with known CVEs

ProductCVEs
Libopenmpt11
Openmpt3
Openmpt CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2019-17113Critical9.82019-10-04In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmod…
CVE-2019-14383Medium6.52019-07-30J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
CVE-2019-14382Medium6.52019-07-30DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
CVE-2019-14380Medium6.52019-07-30libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.
CVE-2018-20861Medium6.52019-07-30libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
CVE-2018-20860Medium6.52019-07-30libopenmpt before 0.3.13 allows a crash with malformed MED files.
CVE-2019-14381High7.52019-07-30libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot.
CVE-2018-11710High8.82018-06-04soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impac…
CVE-2018-10017Medium6.52018-04-11soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an I…
CVE-2018-6611High8.82018-02-04soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
CVE-2017-11311High7.82017-07-17soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code exec…