CVE-2026-105839
libmikmod before 3.3.14 Heap Buffer Overflow via OKT Loader OKT_doPBOD
sezero libmikmod
CVSS
8.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 3% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 3.3.14libmikmodCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers can supply an OKT module whose SLEN chunk wraps the 16-bit numtrk value, causing PBOD writes past allocated track pointers for crashes or code execution.
Text from CVE List
Affected versions 1
- libmikmodaffected: all versions before 3.3.14CVE List
References 5
- github.com/sezero/mikmod/commit/097b69281fad6ba38a553569e6f55dbfdd71dc2aFixvia CVE List
- vulncheck.com/advisories/libmikmod-before-3.3.14-heap-buffer-overflow-via-okt-loader-okt-dopbodAdvisoryvia CVE List
- github.com/sezero/mikmod/blob/libmikmod-3.3.13/libmikmod/loaders/load_okt.c#L286Referencevia CVE List
- github.com/sezero/mikmod/blob/libmikmod-3.3.14/libmikmod/NEWSReferencevia CVE List
- github.com/sezero/mikmodReferencevia CVE List