CVE-2026-105839
HighCVSS 7.8Summary
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers for crashes or code execution.
Risk Assessment
An attacker can trigger a heap buffer overflow, potentially leading to application crashes or arbitrary code execution. This requires processing a crafted OKT module file.
Recommendation
Update libmikmod to version 3.3.14 or later, which fixes this vulnerability. Avoid opening untrusted module files.
Other vulnerabilities in libmikmod
See all- CVE-2026-105838Medium
libmikmod before 3.3.14 has a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read past the itpat buffer and crash applications.
- CVE-2026-105837High
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.
Original NVD description (English source)
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers for crashes or code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS