CVE-2009-1513: Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted...

Security readout for executives and security teams

CVE-2009-1513 is an old libmodplug flaw where a specially crafted audio/module file with an overly long instrument name can crash software, and may allow code execution. The attacker generally needs a user or service to open or process the malicious file. Current exploitation is not documented in the provided sources. Exposure is most likely in legacy systems or applications that still use libmodplug before 0.8.7, especially where untrusted module or PAT-related audio files are opened, uploaded, indexed, or converted. Treat as a targeted legacy dependency risk. Prioritize remediation where file-upload, media-processing, or desktop workflows still handle untrusted audio module files. It is less urgent than known-exploited internet-facing issues, but possible code execution keeps it above routine cleanup. Mitigation focus: Upgrade libmodplug to 0.8.7 or a vendor-fixed package.; Check distribution advisories for backported fixes on supported platforms.; Restrict processing of untrusted module or PAT audio files until patched..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.