libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

libmikmod-devel-3.3.7-1.7 on GA media

mikmod: crash or abort when loading/playing multiple files with different number of channels libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files libmikmod: arbitrary code execution via crafted Impulse Tracker or Ultratracker files