3 issues skipped by the security teams:
- CVE-2018-11710: soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
- CVE-2018-20860: libopenmpt before 0.3.13 allows a crash with malformed MED files.
- CVE-2018-20861: libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/libo/libopenmpt.png){kind=link}