DEBIAN-CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2018-20860

libopenmpt before 0.3.13 allows a crash with malformed MED files...

CVE-2019-14382

DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

DEBIAN-CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

DEBIAN-CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

Authentication flaw

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14380

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

Authentication flaw

DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2019-14383

J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

CVE-2018-20860

libopenmpt before 0.3.13 allows a crash with malformed MED files...

Code injection

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

Out-of-bounds

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files...

Code injection

libopenmpt before 0.3.13 allows a crash with malformed MED files...

UBUNTU-CVE-2019-14382

DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs...

UBUNTU-CVE-2018-20860

libopenmpt before 0.3.13 allows a crash with malformed MED files...

UBUNTU-CVE-2018-20861

libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files...

CVE-2019-14380

CVE-2019-14380 affects libopenmpt up to 0.4.4 (pre-0.4.5); the issue is an out-of-bounds read in XM and MT2 playback that can crash the application. Debian/DSA notes a fix in libopenmpt with a security update (0.4.3-1+deb10u1); other references corroborate a vulnerability in the library before 0....