# CVE-2026-105837: libmikmod integer overflow in DSM_Load

Source: https://junglewise.ai/threats/cve-2026-105837-libmikmod-before-3-3-14-contains-an-integer-overflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-105837 · Severity: high · CVSS 7.8 · Published 2026-10-06

libmikmod is an audio library that plays module sound files in formats like XM, IT, and S3M. A crafted DSM audio file can trigger an integer overflow that overwrites heap memory, potentially crashing the application or allowing arbitrary code execution if the library is used in a program that processes untrusted audio files.

Technologies: [Libmikmod](https://junglewise.ai/threats/technologies/libmikmod). Vendors: [Libmikmod](https://junglewise.ai/threats/vendors/libmikmod).

## Quick answers

**Is CVE-2026-105837 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105837 being exploited in the wild.

**How severe is CVE-2026-105837?** High severity, with a CVSS score of 7.8, published 6 October 2026.

**Which products and versions are affected?** Libmikmod before 3.3.14.

**Is there a fix for CVE-2026-105837?** Yes: fixed in libmikmod 3.3.14. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-105837 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-105837?** Check whether you run Libmikmod at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in libmikmod 3.3.14

## Technical details

An integer overflow vulnerability exists in the DSM_Load() function in load_dsm.c, where the product of numchn (channel count) and numpat (pattern count) fields can wrap around a 16-bit boundary. This causes heap buffer allocation to be too small, leading to heap buffer overflow. The vulnerability is triggered via a malformed DSM module file and requires no authentication or user interaction beyond opening the file.

## Affected products

- libmikmod libmikmod before 3.3.14

## Timeline

- 2026-10-06: disclosed

## References

- [https://github.com/sezero/mikmod](https://github.com/sezero/mikmod)
- [https://github.com/sezero/mikmod/blob/libmikmod-3.3.13/libmikmod/loaders/load_dsm.c](https://github.com/sezero/mikmod/blob/libmikmod-3.3.13/libmikmod/loaders/load_dsm.c)

## Related threats

- [libmikmod out-of-bounds read in MultiTracker loader](https://junglewise.ai/threats/cve-2026-111165-libmikmod-through-3-3-15-contains-a-global-out-of-bounds-read)
- [libmikmod integer overflow in OKT loader](https://junglewise.ai/threats/cve-2026-105839-libmikmod-before-3-3-14-contains-an-integer-overflow-in-the)
- [libmikmod heap out-of-bounds read in Impulse Tracker loader](https://junglewise.ai/threats/cve-2026-105838-libmikmod-before-3-3-14-contains-a-heap-out-of-bounds-read)