Skip to content
OpenAdvisories
Unscored DSA-1850-1 2 CVEs

libmodplug - arbitrary code execution

Published Aug 4, 2009 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 4.0 libmodplug 1:0.7-5.2+etch1
Debian · 5.0 libmodplug 1:0.8.4-1+lenny1

Vulnerabilities 2

  • Unscored —

    Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreame…

  • Unscored —

    Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote atta…