What’s Vulnerable › Vulnerabilities

CVE-2019-14523

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-08-02 · updated 2026-06-17
• Weakness: CWE-191

Description

An issue was discovered in Schism Tracker through 20190722. There is an integer underflow via a large plen in fmt_okt_load_song in the Amiga Oktalyzer parser in fmt/okt.c.

Affected products

• schismtracker Schism Tracker: through 20190722

References

• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html
• https://github.com/schismtracker/schismtracker/issues/202
• https://github.com/schismtracker/schismtracker/releases/tag/20190805
• https://security.gentoo.org/glsa/202107-12
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00083.html
• https://github.com/schismtracker/schismtracker/issues/202
• https://github.com/schismtracker/schismtracker/releases/tag/20190805
• https://security.gentoo.org/glsa/202107-12

Get alerted when CVE-2019-14523 or the next vulnerability affects your stack