CVE-2018-11710

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.07%

Published

Jun 4, 2018

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.

Weaknesses (CWE)

CWE-787

Affected Products (1)

openmpt · libopenmpt (up to 0.3.9)vulnerable

References (4)

https://lib.openmpt.org/libopenmpt/2018/04/29/security-updates-0.3.9-0.2-beta32-0.2.7561-beta20.5-p9-0.2.7386-beta20.3-p12/

PatchRelease Notes

https://source.openmpt.org/browse/openmpt/trunk/?op=revision&rev=10149&peg=10150

Vendor Advisory

https://lib.openmpt.org/libopenmpt/2018/04/29/security-updates-0.3.9-0.2-beta32-0.2.7561-beta20.5-p9-0.2.7386-beta20.3-p12/

PatchRelease Notes

https://source.openmpt.org/browse/openmpt/trunk/?op=revision&rev=10149&peg=10150

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs