https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2013-4234.htmlhttps://patchthecve.com/cve/CVE-2013-4234.htmlTue, 16 Jun 2026 23:56:51 +0000MEDIUM 6.8: Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via a crafted ABC.https://patchthecve.com/cve/CVE-2013-4233.htmlhttps://patchthecve.com/cve/CVE-2013-4233.htmlTue, 16 Jun 2026 23:56:51 +0000MEDIUM 6.8: Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted P header in an ABC file, which triggers a heap-based buffer overflow.https://patchthecve.com/cve/CVE-2011-2915.htmlhttps://patchthecve.com/cve/CVE-2011-2915.htmlTue, 16 Jun 2026 23:32:14 +0000MEDIUM 6.8: Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of instruments.https://patchthecve.com/cve/CVE-2011-2914.htmlhttps://patchthecve.com/cve/CVE-2011-2914.htmlTue, 16 Jun 2026 23:32:14 +0000MEDIUM 6.8: Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted DSM file with a large number of samples.https://patchthecve.com/cve/CVE-2011-2913.htmlhttps://patchthecve.com/cve/CVE-2011-2913.htmlTue, 16 Jun 2026 23:32:14 +0000MEDIUM 6.8: Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption) and possibly execute arbitrary code via a crafted AMS file with a large number of samples.https://patchthecve.com/cve/CVE-2011-2912.htmlhttps://patchthecve.com/cve/CVE-2011-2912.htmlTue, 16 Jun 2026 23:32:14 +0000MEDIUM 6.8: Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted S3M file with an invalid offset.https://patchthecve.com/cve/CVE-2011-2911.htmlhttps://patchthecve.com/cve/CVE-2011-2911.htmlTue, 16 Jun 2026 23:32:14 +0000MEDIUM 6.8: Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted WAV file, which triggers a heap-based buffer overflow.https://patchthecve.com/cve/CVE-2011-1761.htmlhttps://patchthecve.com/cve/CVE-2011-1761.htmlTue, 16 Jun 2026 23:29:58 +0000MEDIUM 6.8: Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted ABC file. NOTE: some of these details are ob