Milkytracker Project Milkytracker — known CVE vulnerabilities

Every CVE whose affected-product data names Milkytracker Project Milkytracker, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-14496 — CVSS 7.8 (high): LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.
• CVE-2019-14497 — CVSS 7.8 (high): ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.
• CVE-2022-34927 — CVSS 7.8 (high): MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the…
• CVE-2019-14464 — CVSS 5.5 (medium): XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.
• CVE-2020-15569 — CVSS 5.5 (medium): PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.