What’s Vulnerable › Vulnerabilities

CVE-2019-14497

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-01 · updated 2026-06-17
• Weakness: CWE-787

Description

ModuleEditor::convertInstrument in tracker/ModuleEditor.cpp in MilkyTracker 1.02.00 has a heap-based buffer overflow.

Affected products

• Canonical Ubuntu Linux: 16.04
• Debian Linux: 8.0, 9.0
• Milkytracker Project Milkytracker: 1.02.00

References

• https://github.com/milkytracker/MilkyTracker/issues/182
• https://lists.debian.org/debian-lts-announce/2019/10/msg00029.html
• https://lists.debian.org/debian-lts-announce/2020/07/msg00023.html
• https://usn.ubuntu.com/4499-1/
• https://github.com/milkytracker/MilkyTracker/issues/182
• https://lists.debian.org/debian-lts-announce/2019/10/msg00029.html
• https://lists.debian.org/debian-lts-announce/2020/07/msg00023.html
• https://usn.ubuntu.com/4499-1/

Get alerted when CVE-2019-14497 or the next vulnerability affects your stack