CVE-2022-34927

HIGH 7.8CVE-2022-34927 · Published 03/08/2022 · updated 17/06/2026

In short

CVE-2022-34927 is a HIGH (CVSS 7.8) vulnerability affecting milkytracker (milkytracker project).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 32.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
milkytracker milkytracker_project	`= 1.03.00`	No fix yet

Description

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.

References

milkytracker/MilkyTracker commit 3a5474f · Patch
milkytracker/MilkyTracker · Exploit

More vulnerabilities in milkytracker

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free