https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-13152.htmlhttps://patchthecve.com/cve/CVE-2020-13152.htmlWed, 17 Jun 2026 02:52:41 +0000MEDIUM 5.5: A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2009-0136.htmlhttps://patchthecve.com/cve/CVE-2009-0136.htmlTue, 16 Jun 2026 23:04:19 +0000HIGH 9.3: Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tahttps://patchthecve.com/cve/CVE-2009-0135.htmlhttps://patchthecve.com/cve/CVE-2009-0135.htmlTue, 16 Jun 2026 23:04:19 +0000HIGH 9.3: Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a large (1) nlen or (2) vlen Tag value, each of which triggers a heap-based buffer https://patchthecve.com/cve/CVE-2008-3699.htmlhttps://patchthecve.com/cve/CVE-2008-3699.htmlTue, 16 Jun 2026 22:56:20 +0000LOW 3.3: The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.