Every CVE Search/ Get API key

MGASA-2024-0242

Updated libopenmpt packages fix security vulnerabilities

No scoreFix available

Possible out-of-bounds read or write when reading malformed MED files. (r19389). [Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20336, r20338). Write buffer overflow when reading unseekable files close to 4GiB in size (r20339). [Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20340). DMF: Possible null-pointer write or excessive memory allocation when reading DMF files (r20323). Potential heap out-of-bounds read or write past sample end with malformed sustain loops in SymMOD files (r20420). Potential heap out-of-bounds read with malformed Dynamic Studio DSm files (r20912).

What each source reports

OSV No score

Updated libopenmpt packages fix security vulnerabilities

Possible out-of-bounds read or write when reading malformed MED files. (r19389). [Null-pointer write (32bit platforms) or excessive memory allocation (64bit platforms) when reading close to 4GiB of data from unseekable files (r20336, r20338). Write buffer overflow when reading unseekable files close to 4GiB in size (r20339). [Possible out-of-memory (32bit platforms) or excessive memory allocation (64bit platforms) when reading malformed data from unseekable files (r20340). DMF: Possible null-pointer write or excessive memory allocation when reading DMF files (r20323). Potential heap out-of-bounds read or write past sample end with malformed sustain loops in SymMOD files (r20420). Potential heap out-of-bounds read with malformed Dynamic Studio DSm files (r20912).

Record
MGASA-2024-0242
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libopenmpt
Mageia:9
before 0.7.8-1.mga9
0.7.8-1.mga9

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

MGASA-2024-0242 is a vulnerability with no CVSS score yet in libopenmpt, published June 28, 2024. No source lists public exploit code. Fixed in libopenmpt 0.7.8-1.mga9.

References

MoveEnter Open