CVE-2022-34927 — HIGH (7.8)

Vulnerability Description

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Milkytracker Project	Milkytracker	1.03.00

Related Weaknesses (CWE)

CWE-787

References

https://github.com/milkytracker/MilkyTracker/commit/3a5474f9102cbdc10fbd9e7b1b2cPatchThird Party Advisory
https://github.com/milkytracker/MilkyTracker/issues/275ExploitIssue TrackingMitigation
https://github.com/milkytracker/MilkyTracker/commit/3a5474f9102cbdc10fbd9e7b1b2cPatchThird Party Advisory
https://github.com/milkytracker/MilkyTracker/issues/275ExploitIssue TrackingMitigation

FAQ

What is CVE-2022-34927?

CVE-2022-34927 is a vulnerability with a CVSS score of 7.8 (HIGH). MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.

How severe is CVE-2022-34927?

CVE-2022-34927 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-34927?

Check the references section above for vendor advisories and patch information. Affected products include: Milkytracker Project Milkytracker.