CVE-2025-47256: Integer Underflow (Wrap or Wraparound)

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...