CVE-2026-105837

Summary

A heap buffer overflow vulnerability exists in libmikmod before version 3.3.14, where crafted track counts in DSM modules can cause integer overflow leading to memory corruption. This allows attackers to potentially crash systems or execute arbitrary code.

Exploitability

Exploitation is moderately difficult as it requires crafting a specific DSM module with carefully calculated numchn and numpat values that wrap a 16-bit value, but the vulnerability is remotely triggerable through file processing.

Blast radius

The impact could be significant in environments where users can upload or process DSM audio files, potentially leading to widespread system crashes or code execution across multiple affected applications using libmikmod.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to libmikmod version 3.3.14 or later to remediate this integer overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.