In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlugInstrumentName and ModPlugSampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.
{ "binaries": [ { "binary_name": "libopenmpt-dev", "binary_version": "0.4.9-1" }, { "binary_name": "libopenmpt-doc", "binary_version": "0.4.9-1" }, { "binary_name": "libopenmpt-modplug-dev", "binary_version": "0.4.9-1" }, { "binary_name": "libopenmpt-modplug1", "binary_version": "0.4.9-1" }, { "binary_name": "libopenmpt-modplug1-dbgsym", "binary_version": "0.4.9-1" }, { "binary_name": "libopenmpt0", "binary_version": "0.4.9-1" }, { "binary_name": "libopenmpt0-dbgsym", "binary_version": "0.4.9-1" }, { "binary_name": "openmpt123", "binary_version": "0.4.9-1" }, { "binary_name": "openmpt123-dbgsym", "binary_version": "0.4.9-1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }