PatchTheCVE: openmpthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-10017: soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause https://patchthecve.com/cve/CVE-2018-10017.htmlhttps://patchthecve.com/cve/CVE-2018-10017.htmlWed, 17 Jun 2026 01:33:22 +0000MEDIUM 6.5: soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.CVE-2018-6611: soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read vihttps://patchthecve.com/cve/CVE-2018-6611.htmlhttps://patchthecve.com/cve/CVE-2018-6611.htmlWed, 17 Jun 2026 02:02:05 +0000HIGH 8.8: soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.CVE-2017-11311: soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer ovhttps://patchthecve.com/cve/CVE-2017-11311.htmlhttps://patchthecve.com/cve/CVE-2017-11311.htmlWed, 17 Jun 2026 01:01:36 +0000HIGH 7.8: soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.