Approved changes feed: RSS · Atom

cpe:2.3:a:libxmp:libxmp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibxmp (1a7a833c-60ae-5bbe-b9d0-c157af1ad7a7)
ProductLibxmp (5a8f8896-3567-5764-9435-76116eeb651e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111131 vulnerable 2026-11-03 10:16:11.216259 libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker
MEDIUM (6.1)
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sample metadata or disrupt loading.
Published: 2026-10-15T18:57:26.487Z
Updated: 2026-10-15T19:50:44.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47256 vulnerable 2026-06-08 07:27:09.868178 Details available
MEDIUM (5.6)
Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.
Published: 2025-05-06T00:00:00.000Z
Updated: 2025-05-06T20:27:26.395Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.