CVE-2019-14382

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2019-09/msg00084.html · Broken Link
• lists.opensuse.org/opensuse-security-announce/2019-09/msg00085.html · Broken Link
• lib.openmpt.org/libopenmpt/2019/01/22/security-updates-0.4.2-0.3.15-0.2.11253-beta37-0.2.7561-beta20.5-p13-0.2.7386-beta20.3-p16 · Patch

libopenmpt のその他の脆弱性

• CVE-2019-17113緊急 9.8In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict th…
• CVE-2019-14383中 6.5J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
• CVE-2019-14380中 6.5libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.
• CVE-2018-20861中 6.5libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
• CVE-2018-20860中 6.5libopenmpt before 0.3.13 allows a crash with malformed MED files.