Stack-based Buffer Overflow in Libxmp Product by Libxmp
CVE-2025-47256
5.6MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-47256?
The Libxmp library prior to version 4.6.2 is susceptible to a stack-based buffer overflow vulnerability within the 'depack_pha' function located in 'loaders/prowizard/pha.c'. This vulnerability occurs when processing malformed Pha format tracker modules embedded in .mod files, leading to potential arbitrary code execution and instability in software relying on the library. Proper validation and handling of input files are crucial to mitigate the risks associated with this vulnerability.
Affected Version(s)
Libxmp 0 <= 4.6.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.