CVE-2013-1980: Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attack...

Security readout for executives and security teams

CVE-2013-1980 is a memory-safety flaw in libxmp's MASI file parser. If software uses vulnerable libxmp versions to open an attacker-supplied MASI music module file, the bug could allow arbitrary code execution. The supplied sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where libxmp before 4.1.0 is installed directly, bundled, or linked into applications that parse untrusted tracker/module audio files, especially MASI files. The bundle does not identify specific affected distributions or applications beyond libxmp. Prioritize remediation for systems that process user-supplied media or module files. For internal-only systems with no untrusted file ingestion, urgency is lower. Because arbitrary code execution is stated but exploitation is not confirmed, manage this as a targeted legacy dependency risk. Mitigation focus: Upgrade libxmp to version 4.1.0 or later where feasible.; Check vendor or distribution advisories for packaged libxmp fixes.; Avoid processing untrusted MASI files with vulnerable libxmp builds..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.