Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2026-111165

libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count

libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices and crashing the loading application.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Raphael Assenat Sezero
Products
Libmikmod Libmikmod
CVE-2026-111166

libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load

libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Raphael Assenat Sezero
Products
Libmikmod Libmikmod
CVE-2026-105837

libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Raphael Assenat Sezero
Products
Libmikmod Libmikmod
CVE-2026-105838

libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loader

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read past the itpat buffer and crash applications.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Raphael Assenat Sezero
Products
Libmikmod Libmikmod
CVE-2026-105839

libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD

libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers for crashes or code execution.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Raphael Assenat Sezero
Products
Libmikmod Libmikmod
CVE-2009-3995

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Multiple heap-based buffer overflows in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed
Vendors
Nullsoft Raphael Assenat Redhat
Products
Winamp Libmikmod Enterprise Linux
CVE-2009-3996

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Heap-based buffer overflow in IN_MOD.DLL (aka the Module Decoder Plug-in) in Winamp before 5.57, and libmikmod 3.1.12, might allow remote attackers to execute arbitrary code via an Ultratracker file.

CVSS 2.0 · 9.3 Critical EPSS 6.5% KEV · Not listed
Vendors
Nullsoft Raphael Assenat Redhat
Products
Winamp Libmikmod Enterprise Linux
CVE-2010-2971

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

loaders/load_it.c in libmikmod, possibly 3.1.12, does not properly account for the larger size of name##env relative to name##tick and name##node, which allows remote attackers to trigger a buffer over-read and possibly have unspecified other impact via a crafted Impulse Tracker file, a related issue to CVE-2010-2546. NOTE: this issue exists because of an incomplete fix for CVE-2009-3995.

CVSS 2.0 · 9.3 Critical EPSS 3.7% KEV · Not listed
Vendors
Raphael Assenat
Products
Libmikmod
CVE-2010-2546

libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files

Multiple heap-based buffer overflows in loaders/load_it.c in libmikmod, possibly 3.1.12, might allow remote attackers to execute arbitrary code via (1) crafted samples or (2) crafted instrument definitions in an Impulse Tracker file, related to panpts, pitpts, and IT_ProcessEnvelope. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3995.

CVSS 2.0 · 9.3 Critical EPSS 6.7% KEV · Not listed
Vendors
Raphael Assenat
Products
Libmikmod