CVE-2018-20860

Description

References

• lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html · Broken Link
• lib.openmpt.org/libopenmpt/2018/10/21/security-updates-0.3.13-0.2.10933-beta36-0.2.7561-beta20.5-p11-0.2.7386-beta20.3-p14 · Patch

Weitere Schwachstellen in libopenmpt

• CVE-2019-17113KRITISCH 9.8In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict th…
• CVE-2019-14383MITTEL 6.5J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
• CVE-2019-14382MITTEL 6.5DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
• CVE-2019-14380MITTEL 6.5libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.
• CVE-2018-20861MITTEL 6.5libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.