CVE-2019-14383: J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.

Security readout for executives and security teams

CVE-2019-14383 is a libopenmpt file-parsing flaw in J2B handling before version 0.4.2. The documented impact is an assertion failure while parsing files with debug STLs, which points to crash-style availability risk rather than confirmed code execution. Exposure is most likely where software uses libopenmpt before 0.4.2 and parses J2B or module files from untrusted sources. Systems using patched distribution packages or newer libopenmpt releases are less likely exposed. Treat as a low-priority hygiene update unless the organization processes untrusted audio/module files with older libopenmpt builds. No source provided confirms exploitation or severe impact. Mitigation focus: Update libopenmpt to version 0.4.2 or later where applicable.; Apply relevant vendor security updates, including openSUSE advisories where used.; Limit processing of untrusted module files until affected components are patched..

Prepared

Jun 6, 2026, 14:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.