CVE-2019-14380: Debian Linux

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.

Affected products

• Debian Debian Linux: version 10.0 only
• Openmpt Libopenmpt: before 0.4.5 (fixed in 0.4.5)

Published 2019-07-30. Last modified 2026-06-17.