CVE-2026-105837

Name of the Vulnerable Software and Affected Versions libmikmod versions prior to 3.3.14

Description An integer overflow exists in the DSM Load() function within load dsm.c. This occurs when a DSM module is supplied where the product of numchn and numpat wraps a 16-bit value, leading to a heap buffer overflow. This memory corruption can result in application crashes or potential arbitrary code execution.

Recommendations Update libmikmod to version 3.3.14 or later.