CVE-2019-17113

2019-10-0400:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.4%

JSON

In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.

CPENameOperatorVersion
openmpteqOpenMPT-1.28.05.00
openmpteqOpenMPT-1.28.04.00
openmpteqlibopenmpt-0.2.6401-beta17
openmpteqOpenMPT-1.18.00.00
openmpteqOpenMPT-1.16.0214a
openmpteqOpenMPT-1.24.04.00
openmpteqOpenMPT-1.22.05.00
openmpteqlibopenmpt-0.2.4764-beta10
openmpteqOpenMPT-1.17.02.44
openmpteqlibopenmpt-0.4.3

Name	Operator	Version
openmpt	eq	OpenMPT-1.28.05.00
openmpt	eq	OpenMPT-1.28.04.00
openmpt	eq	libopenmpt-0.2.6401-beta17
openmpt	eq	OpenMPT-1.18.00.00
openmpt	eq	OpenMPT-1.16.0214a
openmpt	eq	OpenMPT-1.24.04.00
openmpt	eq	OpenMPT-1.22.05.00
openmpt	eq	libopenmpt-0.2.4764-beta10
openmpt	eq	OpenMPT-1.17.02.44
openmpt	eq	libopenmpt-0.4.3