https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-12954.htmlhttps://patchthecve.com/cve/CVE-2017-12954.htmlWed, 17 Jun 2026 01:04:12 +0000MEDIUM 6.5: The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted gig file.https://patchthecve.com/cve/CVE-2017-12953.htmlhttps://patchthecve.com/cve/CVE-2017-12953.htmlWed, 17 Jun 2026 01:04:12 +0000MEDIUM 6.5: The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via a crafted gig file.https://patchthecve.com/cve/CVE-2017-12952.htmlhttps://patchthecve.com/cve/CVE-2017-12952.htmlWed, 17 Jun 2026 01:04:12 +0000MEDIUM 6.5: The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.https://patchthecve.com/cve/CVE-2017-12951.htmlhttps://patchthecve.com/cve/CVE-2017-12951.htmlWed, 17 Jun 2026 01:04:12 +0000MEDIUM 6.5: The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted gig file.