76 matches found
CVE-2025-47256
CVE-2025-47256 Stack overflow in LibXMP Description A stack-based buffer overflow vulnerability exists in the depackpha function of libxmp, a library for module music playback. The vulnerability is triggered when parsing malformed Pha Packer PHA module files. Improper bounds checking on a local...
CVE-2026-111131
A flaw was found in libxmp. An attacker could exploit an off-by-one stack out-of-bounds read in the P61A depacker by convincing a user or service to process a specially crafted audio module file. Successful exploitation could lead to an application crash, resulting in a Denial of Service DoS, or...
Linux Distros Unpatched Vulnerability : CVE-2026-111131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c...
UBUNTU-CVE-2026-111131
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
DEBIAN-CVE-2026-111131
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
CVE-2026-111131
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
CVE-2026-111131 libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
EUVD-2026-102362
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
CVE-2026-111131 libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
CVE-2026-111131
The libxmp library, versions through 4.7.4 , contains an off-by-one stack out-of-bounds read vulnerability within the prowizard P61A depacker function, specifically located at depack_p61a() in src/loaders/prowizard/p61a.c. An attacker can exploit this by providing a crafted headerless P61A module...
CVE-2026-111131
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
CVE-2026-111131 libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depackp61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into sampl...
PT-2026-115137
libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack p61a in src/loaders/prowizard/p61a.c. Attackers can supply a crafted headerless P61A module with 31 samples and a 0xffe0 back-reference size word to leak stack memory into samp...
[SECURITY] Fedora 43 Update: libxmp-4.7.3-1.fc43
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
[SECURITY] Fedora 44 Update: libxmp-4.7.3-1.fc44
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
Fedora 43 : libxmp (2026-47ffcebe44)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-47ffcebe44 advisory. Latest bugfix release. Full changelog: https://sourceforge.net/p/xmp/libxmp/ci/libxmp-4.7.3/tree/docs/Changelog . Fixes a medium-rated security issue:...
Fedora 44 : libxmp (2026-c40eb5767e)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c40eb5767e advisory. Latest bugfix release. Full changelog: https://sourceforge.net/p/xmp/libxmp/ci/libxmp-4.7.3/tree/docs/Changelog . Fixes a medium-rated security issue:...
[SECURITY] Fedora 45 Update: libxmp-4.7.3-1.fc45
Libxmp is a library that renders module files to PCM data. It supports over 90 mainstream and obscure module formats including Protracker MOD, Scream Tracker 3 S3M, Fast Tracker II XM, and Impulse Tracker IT. Many compressed module formats are supported, including popular Unix, DOS, and Amiga fil...
Fedora 45 : libxmp (2026-743387fdbe)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-743387fdbe advisory. Latest bugfix release. Full changelog: https://sourceforge.net/p/xmp/libxmp/ci/libxmp-4.7.3/tree/docs/Changelog . Fixes a medium-rated security issue:...