libopenmpt (SUSE:Linux Enterprise Module for Desktop Applications 15 SP1) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP1 package libopenmpt, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2019-17113 — CVSS 9.8 (critical): In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict…
• CVE-2018-20860 — CVSS 6.5 (medium): libopenmpt before 0.3.13 allows a crash with malformed MED files.
• CVE-2018-20861 — CVSS 6.5 (medium): libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
• CVE-2019-14382 — CVSS 6.5 (medium): DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
• CVE-2019-14383 — CVSS 6.5 (medium): J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.