Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44882
HistoryDec 28, 2023 - 10:50 a.m.

Buffer Overflow

2023-12-2810:50:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
libmikmod.so
buffer overflow
it_load
load_it.c
denial of service

6.9 Medium

AI Score

Confidence

High

0.219 Low

EPSS

Percentile

96.4%

libmikmod.so is vulnerable to Buffer Overflow. The vulnerability is due to the IT_Load function within load_it.c because there no proper validation or limits on the data being read from envelope data in tracker files, such as panpts, pitpts etc. This allows an attacker to craft Impulse Tracker files with specific data that can trigger a buffer overflow potentially leading to Denial of Service.

6.9 Medium

AI Score

Confidence

High

0.219 Low

EPSS

Percentile

96.4%