← Back

Milkytracker

milkytracker

Vendor: Milkytracker Project • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Milkytracker Project
1Milkytracker
Nov 21, 2024
Aug 3, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.
2Debian
Milkytracker Project
2Debian Linux
Milkytracker
Nov 21, 2024
Jul 6, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
PlayerGeneric.cpp in MilkyTracker through 1.02.00 has a use-after-free in the PlayerGeneric destructor.
3Canonical
DebianMilkytracker Project
3Debian Linux
MilkytrackerUbuntu Linux
Nov 21, 2024
Aug 1, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.
3Canonical
DebianMilkytracker Project
3Debian Linux
MilkytrackerUbuntu Linux
Nov 21, 2024
Aug 1, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
LoaderXM::load in LoaderXM.cpp in milkyplay in MilkyTracker 1.02.00 has a stack-based buffer overflow.
4Canonical
DebianFedoraproject+1 more
4Debian Linux
FedoraMilkytracker+1 more
Nov 21, 2024
Jul 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
XMFile::read in XMFile.cpp in milkyplay in MilkyTracker 1.02.00 has a heap-based buffer overflow.