Approved changes feed: RSS · Atom

cpe:2.3:a:openmpt:openmpt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenmpt (4d94879d-0d92-5787-bca6-5c839a1a949b)
ProductOpenmpt (5d5efb9f-4d43-5987-81a0-63d5159d2fdf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/openmpt/openmpt purl2cpe 2026-06-01 10:16:07.043220
pkg:sourceforge/modplug purl2cpe 2026-06-01 10:16:07.043223

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6611 vulnerable 2026-06-08 05:11:54.045525 Details available
soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
Published: 2018-02-04T12:00:00.000Z
Updated: 2024-08-05T06:10:10.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10017 vulnerable 2026-06-08 05:10:26.256516 Details available
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
Published: 2018-04-11T05:00:00.000Z
Updated: 2024-08-05T07:32:01.251Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11311 vulnerable 2026-06-08 05:08:37.156504 Details available
soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
Published: 2017-07-13T20:00:00.000Z
Updated: 2024-08-05T18:05:30.579Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.