Heap Out-of-Bounds Write Vulnerability in Schism Tracker by Schism Tracker
CVE-2026-112007

6.9MEDIUM

Key Information:

Vendor: Schismtracker
Status: Schism Tracker
Vendor: CVE Published:; 18 October 2026

🔔 Create Schismtracker Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-112007?

Schism Tracker versions up to 20260524 are susceptible to a heap out-of-bounds write due to improper handling in the fmt_ult_load_song() function. This vulnerability occurs when a crafted .ult module is used to manipulate the sample count, leading to overwriting the instruments pointer array. Consequently, this can enable attackers to direct the csf_destroy() function to free arbitrary memory pointers, potentially resulting in crashes and exploitation of the application.

Affected Version(s)

Schism Tracker 0 <= 20260524

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-112007 - Proof of Concept