Every CVE Search/ Get API key

CVE-2026-105837

libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

8.5 HighFix available

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Passive

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.15%Unchanged since Oct 7, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.5

libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
CVE-2026-105837
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
EUVDEUVD-2026-93389 8.5

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
EUVD-2026-93389
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-rr6f-2vgw-5v76 8.5

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c...

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
GHSA-rr6f-2vgw-5v76
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
NVD 8.5

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
CVE-2026-105837
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
OSV 8.5

libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
CVE-2026-105837
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-190
Updated
2026-11-02
OSVDEBIAN-CVE-2026-105837 8.5

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
DEBIAN-CVE-2026-105837
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVUBUNTU-CVE-2026-105837 8.5

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
UBUNTU-CVE-2026-105837
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-106664 No score

CVE-2026-105837 affecting package libmikmod 3.3.11.1-14

libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.

Record
AZL-106664
Updated
2026-11-05
OSVopenSUSE-SU-2026:22192-1 No score

Security update for libmikmod

This update for libmikmod fixes the following issues:

Changes in libmikmod:

  • CVE-2026-105839: make sure that numtrk calculation fits into an UWORD (bsc#1284366)
  • CVE-2026-105838: bump itpat allocation to 256, matching allowed packlen limit (bsc#1284367)
  • CVE-2026-105837: make sure that numtrk calculation fits into an UWORD (bsc#1284368)
Record
openSUSE-SU-2026:22192-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libmikmod
Azure Linux:3
 through 3.3.11.1-14 None known
libmikmod
Debian:12
 All versions, plus listed versions
3.3.11.1-73.3.11.1-83.3.12-13.3.13-13.3.14-1
 None known
libmikmod
Debian:13
 All versions, plus listed versions
3.3.13-13.3.14-1
 None known
libmikmod
Debian:14
 before 3.3.14-1, plus listed versions
3.3.13-1
3.3.14-1
libmikmod
Ubuntu:16.04:LTS
 All versions, plus listed versions
3.3.7-13.3.8-13.3.8-2
 None known
timidity
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.13.2-40.2build12.13.2-40.3
 None known
libmikmod
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.3.11.1-13.3.11.1-3
 None known
timidity
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.13.2-40.52.13.2-41
 None known
libmikmod
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.3.11.1-4
 None known
timidity
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.14.0-8build1
 None known
Show 9 moreShow less
Affected packages
PackageAffectedFixed
libmikmod
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.3.11.1-6
 None known
timidity
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.14.0-8build12.14.0-8ubuntu12.14.0-8ubuntu1.22.04.1
 None known
libmikmod
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.3.11.1-73.3.11.1-7build1
 None known
timidity
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.14.0-8.1ubuntu12.14.0-8.1ubuntu42.14.0-8.2ubuntu1
 None known
libmikmod
Ubuntu:26.10
 All versions, plus listed versions
3.3.13-1build1
 None known
timidity
Ubuntu:26.10
 All versions, plus listed versions
2.14.0-8.3ubuntu12.14.0-8.4ubuntu1
 None known
libmikmod
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.3.13-13.3.13-1build1
 None known
timidity
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.14.0-8.3ubuntu1
 None known
libmikmod
openSUSE:Leap 16.0
From an advisory covering 3 CVEs
 before 3.3.11.1-bp160.2.1
3.3.11.1-bp160.2.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-105837 is a high vulnerability (CVSS 8.5) in Sezero Libmikmod, published October 6, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.15%, the 3rd percentile. Fixed in libmikmod 3.3.14-1.

References

Show 11 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open