74 matches found
CVE-2026-112007
A flaw was found in Schism Tracker. An attacker could exploit this vulnerability by enticing a user to open a specially crafted UltraTracker .ult audio file. Due to missing boundary checks on sample counts during file parsing, the application performs an out-of-bounds memory write on the heap. Th...
CVE-2026-112007
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...
CVE-2026-112007 Schism Tracker through 20260524 Heap Out-of-Bounds Write via ULT Loader
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...
EUVD-2026-103460
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...
CVE-2026-112007
Schism Tracker (through version 20260524) contains a heap out-of-bounds write vulnerability within the fmt_ult_load_song() function in fmt/ult.c. The flaw exists because the application fails to clamp the one-byte sample count to MAX_SAMPLES . An attacker can exploit this by providing a crafted ....
PT-2026-116611
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt ult load song in fmt/ult.c that fails to clamp the one-byte sample count to MAX SAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csf destroy to free...
EUVD-2019-5693
Malware in sbrugna...
EUVD-2019-5651
Malware in sbrugna...
EUVD-2021-19273
Malware in sbrugna...
EUVD-2019-5694
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-14465
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fmtmtmloadsong in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow. CVE-2019-14465 Note that Nessus relies on the presence of the package a...
Linux Distros Unpatched Vulnerability : CVE-2019-14524
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmtmtmloadsong in...
Linux Distros Unpatched Vulnerability : CVE-2019-14523
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmtoktloadsong in the Amiga Oktalyzer parser in...
CVE-2021-32419
An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmtmtmloadsong function in fmt/mtm.c...
Linux Distros Unpatched Vulnerability : CVE-2021-32419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmtmtmloadsong function in fmt/mtm.c...
SUSE CVE-2021-32419
An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmtmtmloadsong function in fmt/mtm.c...
CVE-2021-32419
An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmtmtmloadsong function in fmt/mtm.c...
CVE-2021-32419
An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmtmtmloadsong function in fmt/mtm.c...
