MEDIUM
schismtracker
CVE published 2026-10-18
CVE-2026-112007
A heap out-of-bounds write vulnerability exists in Schism Tracker through version 20260524 in the fmt_ult_load_song() function in fmt/ult.c. This vulnerability allows attackers to supply a crafted .ult module that can overwrite the instruments pointer array, leading to a crash of the application when csf_destroy() frees attacker-chosen pointers. The vulnerability has a CVSS score of 6.9 and is considered [truncated]