Manfred Tremmel

**Name of the Vulnerable Software and Affected Versions** libmodplug versions prior to 0.8.7 **Description** The issue is related to a buffer overflow in the PATinst function in src/load pat.cpp, which can be exploited by remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name. The vulnerability can lead to a violation of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. **Recommendations** For versions prior to 0.8.7, update to version 0.8.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the PATinst function in src/load pat.cpp to minimize the risk of exploitation.