https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2005-1847.htmlhttps://patchthecve.com/cve/CVE-2005-1847.htmlTue, 16 Jun 2026 22:13:47 +0000HIGH 7.5: Multiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the (1) rename or (2) sort options.https://patchthecve.com/cve/CVE-2005-1846.htmlhttps://patchthecve.com/cve/CVE-2005-1846.htmlTue, 16 Jun 2026 22:13:47 +0000MEDIUM 5.0: Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the (1) rename or (2) sort options.https://patchthecve.com/cve/CVE-2004-1302.htmlhttps://patchthecve.com/cve/CVE-2004-1302.htmlTue, 16 Jun 2026 22:07:25 +0000HIGH 10.0: The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.