Lucene search

K
mageiaGentoo FoundationMGASA-2024-0242
HistoryJun 28, 2024 - 5:41 a.m.

Updated libopenmpt packages fix security vulnerabilities

2024-06-2805:41:31
Gentoo Foundation
advisories.mageia.org
3
libopenmpt packages
security vulnerabilities
out-of-bounds read
null-pointer write
excessive memory allocation
buffer overflow
unseekable files
4gib
dmf files
heap out-of-bounds read
symmod files
dynamic studio dsm files
unix

7.8 High

AI Score

Confidence

Low

Possible out-of-bounds read or write when reading malformed MED files. (r19389). [Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20336, r20338). Write buffer overflow when reading unseekable files close to 4GiB in size (r20339). [Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20340). DMF: Possible null-pointer write or excessive memory allocation when reading DMF files (r20323). Potential heap out-of-bounds read or write past sample end with malformed sustain loops in SymMOD files (r20420). Potential heap out-of-bounds read with malformed Dynamic Studio DSm files (r20912).

OSVersionArchitecturePackageVersionFilename
Mageia9noarchlibopenmpt< 0.7.8-1libopenmpt-0.7.8-1.mga9

7.8 High

AI Score

Confidence

Low