CVE-2025-47256

CVE-2025-47256 LibXMP におけるスタックオーバーフロー 説明 libxmp（モジュール音楽再生ライブラリ）の depackpha 関数にスタックベースのバッファオーバーフローの脆弱性が存在します。この脆弱性は、不正に作成された Pha Packer PHA モジュールファイルを解析する際にトリガーされます。 ローカルスタックバッファに対する境界チェックが不適切なため、攻撃者は配列の境界外にデータを書き込むことができ、サービス拒否 DoS や、特定の条件下ではリモートコード実行 RCE につながる可能性があります。 ビルド: gcc -g -O0...

Astra Linux – Vulnerability in libxmp

Libxmp through version 4.6.2 has a stack-based buffer overflow in the depackpha function in the loaders/prowizard/pha.c file, due to a malformed Pha format tracker module in a .mod file...

MGASA-2026-0191 Updated libxmp packages fix security vulnerabilities

CVE-2023-45679: Attempt to free an uninitialized memory pointer in vorbisdeinit CVE-2023-45680: Null pointer dereference in vorbisdeinit CVE-2023-45681: Out of bounds heap buffer write CVE-2023-45676: Multi-byte write heap buffer overflow in startdecoder CVE-2023-45677: Heap buffer out of bounds...

Updated libxmp packages fix security vulnerabilities

CVE-2023-45679: Attempt to free an uninitialized memory pointer in vorbisdeinit CVE-2023-45680: Null pointer dereference in vorbisdeinit CVE-2023-45681: Out of bounds heap buffer write CVE-2023-45676: Multi-byte write heap buffer overflow in startdecoder CVE-2023-45677: Heap buffer out of bounds...

EUVD-2025-13638

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2025-47256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

DEBIAN-CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

UBUNTU-CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...

CVE-2025-47256

Libxmp up to 4.6.2 is affected by a stack-based buffer overflow in depack_pha (loaders/prowizard/pha.c) triggered by a malformed Pha format tracker module in a .mod file. The exploitation is Local with no privileges required and no user interaction, with a CVSS v3.1 base score of 5.6 (Low confide...

Exploit for CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack...

Exploit for CVE-2025-47256

CVE-2025-47256 Stack overflow in LibXMP Description A stack...

PT-2025-19987

Name of the Vulnerable Software and Affected Versions Libxmp versions 4.6.2 and earlier Description The issue is a stack-based buffer overflow in the depack pha function in loaders/prowizard/pha.c, which occurs when processing a malformed Pha format tracker module in a .mod file. Recommendations...

Joomla! Object Injection Vulnerability

An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for object injection attacks because there is no protection mechanism such as the TYPO3 PHAR stream wrapper to prevent use of the phar:// handler for non .phar-files...

Android Scoring System Roots out Malicious, Harmful Apps

Google’s crusade against malicious and potentially harmful apps PHA in the Android ecosystem is a complex endeavor anchored by its Verify Apps malware scanner and a scoring system that flags potential problems before they multiply. The system, called Dead or Insecure DOI, has been effective in...

MassVet Android Malicious App Scanner

Most Android malware samples can be found clinging to some sort of knockoff to a legitimate application. Hiding in plain sight like that, sometimes they find their way into Google Play or any one of the dozens of less-patrolled Android markets. Researchers at Indiana University believe they’ve co...