Stanislav Brabec

**Name of the Vulnerable Software and Affected Versions** YaMT versions prior to 0.5 2 **Description** The issue allows attackers to overwrite arbitrary files via specific options, including the rename or sort options. **Recommendations** For versions prior to 0.5 2, update to version 0.5 2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** YaMT versions prior to 0.5 2 **Description** The issue is related to multiple buffer overflows that allow attackers to execute arbitrary code. This can be achieved via the `rename` or `sort` options. **Recommendations** For versions prior to 0.5 2, update to version 0.5 2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** libmodplug versions prior to 0.8.7 **Description** The issue is related to a buffer overflow in the PATinst function in src/load pat.cpp, which can be exploited by remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name. The vulnerability can lead to a violation of confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely. **Recommendations** For versions prior to 0.8.7, update to version 0.8.7 or later to resolve the issue. As a temporary workaround, consider restricting the use of the PATinst function in src/load pat.cpp to minimize the risk of exploitation.