CVE-2021-32419

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-02-17 · updated 2026-06-17
Weakness: CWE-787

Description

An issue in Schism Tracker v20200412 fixed in v.20200412 allows attacker to obtain sensitive information via the fmt_mtm_load_song function in fmt/mtm.c.

Affected products

schismtracker Schism Tracker: before 20200412 — fixed in 20200412

How to fix

Upgrade to a fixed version: schismtracker Schism Tracker 20200412. Check the vendor advisory for mitigations.

References

https://github.com/schismtracker/schismtracker/commit/1e2cc389a2a058fd13d99460c11115a6f7f7a6a4
https://github.com/schismtracker/schismtracker/issues/249
https://github.com/schismtracker/schismtracker/commit/1e2cc389a2a058fd13d99460c11115a6f7f7a6a4
https://github.com/schismtracker/schismtracker/issues/249

Get alerted when CVE-2021-32419 or the next vulnerability affects your stack