CVE-2007-6720: Igno Saitz Libmikmod

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

libmikmod 3.1.9 through 3.2.0, as used by MikMod, SDL-mixer, and possibly other products, relies on the channel count of the last loaded song, rather than the currently playing song, for certain playback calculations, which allows user-assisted attackers to cause a denial of service (application crash) by loading multiple songs (aka MOD files) with different numbers of channels.

Affected products

• Igno Saitz Libmikmod: version 3.1.9-1 only; version 3.1.9-2 only; version 3.1.9-3 only; version 3.1.9-4 only; version 3.1.9-5 only; version 3.1.9-6 only; …

Published 2009-01-20. Last modified 2026-06-16.