Linux Distros Unpatched Vulnerability : CVE-2026-105838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memo...

SUSE CVE-2026-105838

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

CVE-2026-105838

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

AZL-106661 CVE-2026-105838 affecting package libmikmod 3.3.11.1-14

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

DEBIAN-CVE-2026-105838

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

CVE-2026-105838 libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loader

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

CVE-2026-105838

The libmikmod library, specifically versions before 3.3.14 , contains a heap out-of-bounds read vulnerability within the Impulse Tracker loader (load_it.c ). The issue occurs because the IT_ConvertTrack() function fails to properly bound checks when processing oversized patterns; providing a craf...

CVE-2026-105838

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

CVE-2026-105838 libmikmod before 3.3.14 Heap Out-of-Bounds Read via IT Module Loader

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

EUVD-2026-93390

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader loadit.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing ITConvertTrack to read past...

PT-2026-115839

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT ConvertTrack to read pas...

PT-2026-106723

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.14 Description A heap out-of-bounds read exists in the Impulse Tracker loader load it.c. An attacker can provide a specially crafted IT module containing more than 200 pattern rows, which causes the IT...

Malicious code in analytics-bp-passive-tracker-loader (npm)

Source: ossf-package-analysis acb2b0591e0d61f597b43b55a8fd70dfcb8aca1d696e09f2a63c4f6f5c5a1959 The OpenSSF Package Analysis project identified 'analytics-bp-passive-tracker-loader' @ 99.99.100 npm as malicious. It is considered malicious because: - The package communicates with a domain associate...

Malicious code in analytics-bp-passive-tracker-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis acb2b0591e0d61f597b43b55a8fd70dfcb8aca1d696e09f2a63c4f6f5c5a1959 The OpenSSF Package Analysis project identified 'analytics-bp-passive-tracker-loader' @ 99.99.100 npm as malicious. It is considered malicious...