fmt_mtm_load_song in fmt/mtm.c in Schism Tracker 20190722 has a heap-based buffer overflow.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/schismtracker/schismtracker/issues/198 | patch third party advisory issue tracking |
https://github.com/schismtracker/schismtracker/releases/tag/20190805 | third party advisory release notes |
https://security.gentoo.org/glsa/202107-12 | third party advisory vendor advisory |