Heap Buffer Overflow in libmikmod Affects Multiple Audio Applications

CVE-2026-105837

What is CVE-2026-105837?

The libmikmod library prior to version 3.3.14 is susceptible to an integer overflow vulnerability located in the DSM_Load() function. This issue arises due to improper handling of track counts in a DSM module, allowing attackers to craft malicious inputs that can cause the numchn and numpat multiplication to exceed the bounds of a 16-bit integer. As a result, this can lead to a heap buffer overflow, permitting attackers to overwrite critical memory areas, potentially leading to application crashes or unauthorized code execution.

References