CVE-2019-14524

An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in fmt/mtm.c, a different vulnerability than CVE-2019-14465...

CVE-2019-14524

CVE-2019-14524 is a local, heap-based overflow in Schism Tracker’s MTM loader (fmt_mtm_load_song in fmt/mtm.c) triggered by a large number of song patterns. Affects Schism Tracker up to 20190722. Public advisories (openSUSE GLSA-202107-12 and OpenSUSE-SU-2019:1994) report a fix in patches release...

CVE-2019-14497

ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow...

CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

CVE-2019-14464

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow...

Heap overflow

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

Heap overflow

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow...

CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

CVE-2019-14465

fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow...

CVE-2019-14464

CVE-2019-14464 is a heap-based overflow in MilkyTracker’s XMFile::read (MilkyTracker 1.02.00). Connected advisories confirm multiple mitigations across distros: Debian DLA-2292-1 fixes MilkyTracker with version 0.90.86+dfsg-2+deb9u1; Ubuntu USN-4499-1 addresses MilkyTracker vulnerabilities; Fedor...

CVE-2019-14464

XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow...

Heap overflow

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

CVE-2019-13568

CVE-2019-13568 affects the CImg library (versions up to 2.6.7) and is caused by a heap-based buffer overflow in _load_bmp within CImg.h when processing a malformed BMP image. The issue is documented across multiple feeds (NVD entry with a base score up to 8.8 in CVSS-3.0, indicating high impact) ...

CVE-2019-13568

CImg through 2.6.7 has a heap-based buffer overflow in loadbmp in CImg.h because of erroneous memory allocation for a malformed BMP image...

CVE-2019-14431

In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256 bytes and possible Remote Code Execution in parseSSLHandshake in sslDecode.c. During processing of a crafted packet, the server mishandles the...

SUSE-SU-2019:2010-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory bsc1140554. - CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c bsc1140501. - CVE-2019-13311: Fixed a memory leak at...

CVE-2019-14378

ipreass in ipinput.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment...