{"id":"CVE-2022-34927","details":"MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.","modified":"2026-08-12T13:01:06.320684Z","published":"2022-08-03T00:19:45Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34927.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34927.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34927"},{"type":"REPORT","url":"https://github.com/milkytracker/MilkyTracker/issues/275"},{"type":"FIX","url":"https://github.com/milkytracker/MilkyTracker/commit/3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91b"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/milkytracker/milkytracker","events":[{"introduced":"5ffac52ee67560924ecf046d03c7736a8fe21e3e"},{"fixed":"3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91b"}],"database_specific":{"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:milkytracker_project:milkytracker:1.03.00:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.03.00"},{"last_affected":"1.03.00"}]}}],"versions":["1.03.00","v1.03.00"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34927.json","vanir_signatures_modified":"2026-08-12T13:01:06Z","vanir_signatures":[{"target":{"file":"src/milkyplay/LoaderXM.cpp"},"deprecated":false,"digest":{"line_hashes":["92762678729644534731041799942737680000","263997541143629577749552266977049635344","224676694526586997915366558330786479696","113720897472328604541739210501823761945"],"threshold":0.9},"id":"CVE-2022-34927-2af757c9","signature_type":"Line","signature_version":"v1","source":"https://github.com/milkytracker/milkytracker/commit/3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91b"},{"deprecated":false,"digest":{"function_hash":"154008910926743438524962085660973975776","length":16512},"id":"CVE-2022-34927-cb042e6a","signature_type":"Function","signature_version":"v1","source":"https://github.com/milkytracker/milkytracker/commit/3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91b","target":{"file":"src/milkyplay/LoaderXM.cpp","function":"LoaderXM::load"}}]}}],"schema_version":"1.9.0"}