4 matches found
CVE-2026-105838
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...
CVE-2026-105838
The libmikmod library, specifically versions before 3.3.14 , contains a heap out-of-bounds read vulnerability within the Impulse Tracker loader (load_it.c ). The issue occurs because the IT_ConvertTrack() function fails to properly bound checks when processing oversized patterns; providing a craf...
CVE-2026-105838 libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loader
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...
EUVD-2026-93390
libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...