Approved changes feed: RSS · Atom
cpe:2.3:a:raphael_assenat:libmikmod:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Raphael Assenat (b52fdba4-d01e-513e-97f1-23ac6e2d3d96) |
|---|---|
| Product | Libmikmod (5483ef2e-fee4-5111-8d8f-d6866792fe0d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:cpan/audio-mikmod |
purl2cpe | 2026-06-01 10:17:19.843248 |
pkg:github/mistydemeo/libmikmod |
purl2cpe | 2026-06-01 10:17:19.843251 |
pkg:gitlab/redhat/libmikmod |
purl2cpe | 2026-06-01 10:17:19.843253 |
pkg:rpm/fedora/libmikmod |
purl2cpe | 2026-06-01 10:17:19.843256 |
pkg:rpm/opensuse/libmikmod |
purl2cpe | 2026-06-01 10:17:19.843259 |
pkg:sourceforge/mikmod |
purl2cpe | 2026-06-01 10:17:19.843262 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-111166 |
vulnerable | 2026-11-03 10:16:11.183703 |
libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
MEDIUM (5.5)
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
Published: 2026-10-15T18:57:52.637Z
Updated: 2026-10-15T19:31:56.158Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-111165 |
vulnerable | 2026-11-03 10:16:10.489233 |
libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count
MEDIUM (5.5)
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices and crashing the loading application.
Published: 2026-10-15T18:57:51.926Z
Updated: 2026-10-21T01:27:50.397Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.