PT-2024-41054 · Mageia · Libopenmpt

Published 2024-06-28 · Updated 2024-06-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions.

Description The issue involves several potential problems when reading malformed files, including out-of-bounds reads or writes, null-pointer writes, excessive memory allocation, and buffer overflows. These issues can occur when reading specific types of files, such as MED, DMF, SymMOD, or Dynamic Studio DSm files, especially when dealing with unseekable files or files close to 4GiB in size. The problems can lead to memory issues, including out-of-memory errors on 32-bit platforms or excessive memory allocation on 64-bit platforms.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2024-0242

Affected Products

Libopenmpt

References · 8

• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ZVQOQRGG6SYMGVWYOQWZ6D5URKRT4FKC · Vendor Advisory
• https://advisories.mageia.org/MGASA-2024-0242.html · Security Note
• https://osv.dev/vulnerability/MGASA-2024-0242 · Vendor Advisory
• https://lib.openmpt.org/libopenmpt/2023/06/18/security-updates-0.7.2-0.6.11-0.5.25-release-0.4.37 · Note
• https://lib.openmpt.org/libopenmpt/2024/03/17/security-updates-0.7.5-0.6.14-0.5.28-0.4.40 · Note
• https://bugs.mageia.org/show_bug.cgi?id=33333 · Note
• https://lib.openmpt.org/libopenmpt/2024/03/24/security-updates-0.7.6-0.6.15-0.5.29-0.4.41 · Note
• https://lib.openmpt.org/libopenmpt/2024/06/09/security-update-0.7.8-releases-0.6.17-0.5.31-0.4.43 · Note