libopenmpt (SUSE:Linux Enterprise Module for Desktop Applications 15) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 package libopenmpt, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2019-17113 — CVSS 9.8 (critical): In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict…
• CVE-2018-11710 — CVSS 8.8 (high): soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have…
• CVE-2018-10017 — CVSS 6.5 (medium): soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service…
• CVE-2019-14382 — CVSS 6.5 (medium): DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
• CVE-2019-14383 — CVSS 6.5 (medium): J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
• CVE-2018-20861 — CVSS 6.5 (medium): libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
• CVE-2018-20860 — CVSS 6.5 (medium): libopenmpt before 0.3.13 allows a crash with malformed MED files.