Libmodplug

Vendor:

First CVE: Apr 27, 2009 · Active for 17 years

11

Total CVEs

More Total CVEs than 89% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

6.9

Avg CVSS

Higher Avg CVSS than 39% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Libmodplug over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 27, 2009

17 years ago

Most Recent CVE

Sep 16, 2013

4,693 days ago

CVE Severity & Scoring

Libmodplug11 CVEs

91%

9%

All CVEs352,101 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown11 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown11 (100.0%)

User Interaction

None0 (0.0%)

Unknown11 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown11 (100.0%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2011-1574MEDIUM Stack-based buffer overflow in the ReadS3M method in load_s3m.cpp in libmodplug before 0.8.8.2 allows remote attackers to execute arbitrary code via a crafted S3M file.	May 9, 2011	6.8	66	NO	YES
CVE-2011-1761MEDIUM Multiple stack-based buffer overflows in the (1) abc_new_macro and (2) abc_new_umacro functions in src/load_abc.cpp in libmodplug before 0.8.8.3 allow remote attackers to cause a d	Jun 7, 2012	6.8	38	NO	YES
CVE-2009-1438HIGH Integer overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other products, allows context-depen	Apr 27, 2009	7.5	24	NO	NO
CVE-2011-2912MEDIUM Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly e	Jun 7, 2012	6.8	23	NO	NO
CVE-2011-2915MEDIUM Off-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and	Jun 7, 2012	6.8	22	NO	NO
CVE-2011-2914MEDIUM Off-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (memory corruption) and p	Jun 7, 2012	6.8	22	NO	NO
CVE-2011-2913MEDIUM Off-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service (stack memory corruption)	Jun 7, 2012	6.8	22	NO	NO
CVE-2011-2911MEDIUM Integer overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of service and possibly execute arbi	Jun 7, 2012	6.8	22	NO	NO
CVE-2013-4234MEDIUM Multiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier allow remote attackers to cause a	Sep 16, 2013	6.8	19	NO	NO
CVE-2013-4233MEDIUM Integer overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary	Sep 16, 2013	6.8	19	NO	NO

View all 11 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

9.1% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

2 CVEs

18.2% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Libmodplug

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
0.8.8.3	2	6.8	4.2%	0
0.8.8.2	7	6.8	4.4%	0
0.8.8.1	8	6.8	5.2%	1
0.8.8	9	6.8	9.4%	2
0.8.7	9	6.8	9.4%	2
0.8.6	9	6.8	9.4%	2
0.8.5	10	6.8	8.9%	2
0.8.4	11	6.9	8.5%	2
0.8	11	6.9	8.5%	2