CVE-2022-34927

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/milkytracker/MilkyTracker/commit/3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91bPatch, Third Party Advisory
https://github.com/milkytracker/MilkyTracker/issues/275Exploit, Issue Tracking, Mitigation, Patch, Third Party Advisory
https://github.com/milkytracker/MilkyTracker/commit/3a5474f9102cbdc10fbd9e7b1b2c8d3f3f45d91bPatch, Third Party Advisory
https://github.com/milkytracker/MilkyTracker/issues/275Exploit, Issue Tracking, Mitigation, Patch, Third Party Advisory

Timeline

Published: Aug 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-349288.8JFinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via /system/user.CVE-2022-34935.4A vulnerability, which was classified as problematic, has been found in SourceCodester Human Resource Management System 1.0. This issue affe CVE-2022-349378.8Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows at CVE-2022-34948.8The Complianz WordPress plugin before 6.3.4, and Complianz Premium WordPress plugin before 6.3.6 allow a translators to inject arbitrary SQL CVE-2022-349459.8Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getproductreport.php.CVE-2022-349469.8Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getexpproduct.php.CVE-2022-349479.8Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editcategory.php.CVE-2022-349489.8Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editbrand.php.CVE-2022-349499.8Pharmacy Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the email or password parameter at logi CVE-2022-34957.2A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affe CVE-2022-349509.8Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php.CVE-2022-349519.8Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the startDate parameter at getsalereport.php.