CVE-2026-105837
libmikmod before 3.3.14 Heap Buffer Overflow via DSM Loader Integer Overflow
sezero libmikmod
CVSS
8.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 3.3.14libmikmodCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attackers can supply a DSM module whose numchn and numpat product wraps a 16-bit value, overwriting heap memory to cause crashes or potential code execution.
Text from CVE List
Affected versions 1
- libmikmodaffected: all versions before 3.3.14CVE List
References 5
- github.com/sezero/mikmod/commit/a125eabbd086f311496ae46d08aaebcad0a1c426Fixvia CVE List
- vulncheck.com/advisories/libmikmod-before-3.3.14-heap-buffer-overflow-via-dsm-loader-integer-overflowAdvisoryvia CVE List
- github.com/sezero/mikmod/blob/libmikmod-3.3.13/libmikmod/loaders/load_dsm.c#L273Referencevia CVE List
- github.com/sezero/mikmod/blob/libmikmod-3.3.14/libmikmod/NEWSReferencevia CVE List
- github.com/sezero/mikmodReferencevia CVE List