Heap-based Buffer Overflow in Schism Tracker by Schism Tracker Development Team
CVE-2019-14524

7.8HIGH

Key Information:

Vendor

Schismtracker

Status
Schism Tracker
Vendor
CVE Published:
2 August 2019

What is CVE-2019-14524?

A heap-based buffer overflow was identified in Schism Tracker, specifically in the function fmt_mtm_load_song within the file fmt/mtm.c. This vulnerability arises when an excessive number of song patterns are processed, potentially allowing an attacker to execute malicious code or affect application stability.

References

https://github.com/schismtracker/schismtracker/issues/201
x_refsource_MISC
https://github.com/schismtracker/schismtracker/releases/t...
x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2019...
vendor-advisoryx_refsource_SUSE

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.