CVE-2019-14464

CVE-2019-14464 is a heap-based overflow in MilkyTracker’s XMFile::read (MilkyTracker 1.02.00). Connected advisories confirm multiple mitigations across distros: Debian DLA-2292-1 fixes MilkyTracker with version 0.90.86+dfsg-2+deb9u1; Ubuntu USN-4499-1 addresses MilkyTracker vulnerabilities; Fedor...

CVE-2019-14496

CVE-2019-14496 affects MilkyTracker (Milkyplay loader: LoaderXM::load in LoaderXM.cpp) where loading XM files can trigger a stack-based buffer overflow. Public descriptions confirm MilkyTracker 1.02.00 is vulnerable. No exploitation details are provided in the supplied documents. Mitigation: appl...

CVE-2019-14497

MilkyTracker 1.02.00 is affected by a heap-based buffer overflow in ModuleEditor::convertInstrument (tracker/ModuleEditor.cpp). Public records (Debian DLA-2292-1, Ubuntu USN-4499-1, Debian/OpenVAS advisories) confirm multiple CVEs including CVE-2019-14497. The vulnerability could cause a crash an...

CVE-2020-15569

MilkyTracker up to version 1.02.00 is affected by CVE-2020-15569 due to a use-after-free in PlayerGeneric destructor. Public references confirm the flaw in PlayerGeneric.cpp and variants across OSV/NVD records. Debian’s DLA-2292-1 fixes this and related CVEs in milkytracker by upgrading to 0.90.8...

CVE-2022-34927

CVE-2022-34927 affects MilkyTracker v1.03.00. It is a stack overflow in the LoaderXM::load component triggered by a crafted XM module file. Public entries assign high severity (CVSS 3.1: 7.8). The supplied documents do not provide exploitation details or a patch/remediation.