Libxmp
Monthly
An off-by-one stack out-of-bounds read in libxmp through 4.7.4 allows a crafted headerless P61A (ProPacker 61A) module to make the prowizard depacker read one byte past a stack buffer, leaking a small amount of stack memory into sample metadata and/or aborting the module load. The flaw is reachable only when an application built on libxmp opens the attacker-supplied file, so exploitation is local and requires user interaction (no credentials are involved, per the PR:N vector), and the assessed impact is limited to low confidentiality loss with high availability impact - no code execution or data modification. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and the issue is a genuine but moderate-priority concern rather than a top-tier emergency.
An off-by-one stack out-of-bounds read in libxmp through 4.7.4 allows a crafted headerless P61A (ProPacker 61A) module to make the prowizard depacker read one byte past a stack buffer, leaking a small amount of stack memory into sample metadata and/or aborting the module load. The flaw is reachable only when an application built on libxmp opens the attacker-supplied file, so exploitation is local and requires user interaction (no credentials are involved, per the PR:N vector), and the assessed impact is limited to low confidentiality loss with high availability impact - no code execution or data modification. No public exploit code or confirmed in-the-wild exploitation was identified at time of analysis, and the issue is a genuine but moderate-priority concern rather than a top-tier emergency.