← Vulnerability feed

Vulnerability record · CVE-2009-1513 · published 4 May 2009

CVE-2009-1513: Konstanty bialkowski libmodplug memory buffer overflow vulnerability

KKonstanty Bialkowski · Libmodplug

Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.

6.8 CVSS 2.0 Medium EPSS 4.1% · top 9.6% CWE-119 · Memory buffer overflow
6.8CVSS 2.0 base score
4.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
34References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084
http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4
http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7
http://osvdb.org/54109
http://secunia.com/advisories/34927 Vendor Advisory
http://secunia.com/advisories/35026
http://secunia.com/advisories/35736
http://secunia.com/advisories/36158
http://security.gentoo.org/glsa/glsa-200907-07.xml
http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275 Patch
http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275 Patch
http://www.debian.org/security/2009/dsa-1850
http://www.mandriva.com/security/advisories?name=MDVSA-2009:128
http://www.openwall.com/lists/oss-security/2009/04/29/5
http://www.securityfocus.com/bid/34747 Patch
http://www.ubuntu.com/usn/USN-771-1
http://www.vupen.com/english/advisories/2009/1200 PatchVendor Advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084
http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4
http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7
http://osvdb.org/54109
http://secunia.com/advisories/34927 Vendor Advisory
http://secunia.com/advisories/35026
http://secunia.com/advisories/35736
http://secunia.com/advisories/36158
http://security.gentoo.org/glsa/glsa-200907-07.xml
http://sourceforge.net/project/shownotes.php?release_id=678622&group_id=1275 Patch
http://sourceforge.net/tracker/?func=detail&aid=2777467&group_id=1275&atid=301275 Patch
http://www.debian.org/security/2009/dsa-1850
http://www.mandriva.com/security/advisories?name=MDVSA-2009:128
http://www.openwall.com/lists/oss-security/2009/04/29/5
http://www.securityfocus.com/bid/34747 Patch
http://www.ubuntu.com/usn/USN-771-1
http://www.vupen.com/english/advisories/2009/1200 PatchVendor Advisory

Track CVE-2009-1513 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2009-1438Konstanty bialkowski libmodplug vulnerabilityInteger overflow in the CSoundFile::ReadMed function (src/load_med.cpp) in libmodplug before 0.8.6, as used in gstreamer-plugins, TTPlayer, and other…EPSS 4.7%6.8CVE-2013-4234Konstanty bialkowski libmodplug memory buffer overflow vulnerabilityMultiple heap-based buffer overflows in the (1) abc_MIDI_drum and (2) abc_MIDI_gchord functions in load_abc.cpp in libmodplug 0.8.8.4 and earlier all…EPSS 4.4%6.8CVE-2013-4233Konstanty bialkowski libmodplug vulnerabilityInteger overflow in the abc_set_parts function in load_abc.cpp in libmodplug 0.8.8.4 and earlier allows remote attackers to cause a denial of service…EPSS 4.1%6.8CVE-2011-2915Konstanty bialkowski libmodplug vulnerabilityOff-by-one error in the CSoundFile::ReadAMS2 function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of s…EPSS 4.2%6.8CVE-2011-2913Konstanty bialkowski libmodplug vulnerabilityOff-by-one error in the CSoundFile::ReadAMS function in src/load_ams.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of se…EPSS 4.6%6.8CVE-2011-2911Konstanty bialkowski libmodplug vulnerabilityInteger overflow in the CSoundFile::ReadWav function in src/load_wav.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of se…EPSS 4.3%6.8CVE-2011-2914Konstanty bialkowski libmodplug vulnerabilityOff-by-one error in the CSoundFile::ReadDSM function in src/load_dms.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of se…EPSS 4.6%6.8CVE-2011-2912Konstanty bialkowski libmodplug memory buffer overflow vulnerabilityStack-based buffer overflow in the CSoundFile::ReadS3M function in src/load_s3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a d…EPSS 4.3%

Source: NIST National Vulnerability Database (record CVE-2009-1513), CISA KEV, FIRST EPSS (scores of 2026-09-30). This page is refreshed as NVD updates the record.