libmodplug: This update for libmodplug fixes the following issues: Changes in libmodplug: - CVE-2026-108577: This issue affects...
CVE-2026-111271 is fixed in libmodplug on 1 platform by OPENSUSE-SU-2026:22165-1 (version 0.8.9.0+git20170610.f6dd59a-bp160.2.1), released November 7, 2026. It is not reported as exploited. Patch Radar priority: Routine.
This update for libmodplug fixes the following issues: Changes in libmodplug: - CVE-2026-108577: This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Music Format Parser. This manipulation causes resource consumption [bsc#1284977] - CVE-2026-111270: a heap-based out-of-bounds write in CSoundFile:ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS [bsc#1285765] - CVE-2026-111271: a heap-based out-of-bounds read vulnerability in CSoundFile:ReadAMS2() in src/load_ams.cpp [bsc#1285766] - CVE-2026-75904: libmodplug through 0.8.9.1 contains an out-of-bounds read in pat_smplooped in src/load_pat.cpp [bsc#1275624]
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libmodplug · opensuse-leap 16.0 | 0.8.9.0+git20170610.f6dd59a-bp160.2.1 | OPENSUSE-SU-2026:22165-1 | Nov 7, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.