high7.8
CVE-2019-14524
An issue was discovered in Schism Tracker through 20190722.
Impact
An issue was discovered in Schism Tracker through 20190722. There is a heap-based buffer overflow via a large number of song patterns in fmt_mtm_load_song in fmt/mtm.c, a different vulnerability than CVE-2019-14465.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schismtracker | Schism Tracker | through 20190722 |
| Opensuse | Backports | Version sle-15 |
| Opensuse | Leap | Versions 15.0, 15.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html
- https://github.com/schismtracker/schismtracker/issues/201
- https://github.com/schismtracker/schismtracker/releases/tag/20190805
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html
- https://github.com/schismtracker/schismtracker/issues/201
- https://github.com/schismtracker/schismtracker/releases/tag/20190805