Approved changes feed: RSS · Atom

cpe:2.3:a:sezero:libmikmod:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSezero (a2b8f1b8-9add-53d4-aaf5-224e5800ef18)
ProductLibmikmod (9f5ddb7e-cee8-5ea1-ac8a-73c48953f44e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111166 vulnerable 2026-11-03 10:16:11.183091 libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load
MEDIUM (5.5)
libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF module. Attackers can enable the linear-period header flag and map notes to out-of-range samples, causing noteindex indexing far past the heap allocation and crashing applications that load the file.
Published: 2026-10-15T18:57:52.637Z
Updated: 2026-10-15T19:31:56.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111165 vulnerable 2026-11-03 10:16:10.488240 libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count
MEDIUM (5.5)
libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices and crashing the loading application.
Published: 2026-10-15T18:57:51.926Z
Updated: 2026-10-21T01:27:50.397Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.