# CVE-2026-105839: libmikmod integer overflow in OKT loader

Source: https://junglewise.ai/threats/cve-2026-105839-libmikmod-before-3-3-14-contains-an-integer-overflow-in-the  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-06. Updated: 2026-10-06  
License: CC BY 4.0 with a link back

CVE-2026-105839 · Severity: high · CVSS 7.8 · Published 2026-10-06

libmikmod is a library that plays audio module files in formats like MOD, XM, and OKT. An integer overflow in the OKT (Oktalyzer) format loader can be triggered by specially crafted music files, allowing an attacker to cause a heap buffer overflow that could crash the application or execute arbitrary code when the file is opened.

Technologies: [Libmikmod](https://junglewise.ai/threats/technologies/libmikmod). Vendors: [Libmikmod](https://junglewise.ai/threats/vendors/libmikmod).

## Quick answers

**Is CVE-2026-105839 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105839 being exploited in the wild.

**How severe is CVE-2026-105839?** High severity, with a CVSS score of 7.8, published 6 October 2026.

**Which products and versions are affected?** Libmikmod before 3.3.14.

**Is there a fix for CVE-2026-105839?** Yes: fixed in libmikmod 3.3.14. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-105839 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-105839?** Check whether you run Libmikmod at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in libmikmod 3.3.14

## Technical details

The vulnerability is an integer overflow in the OKT_doPBOD() function within libmikmod's Oktalyzer loader that wraps the 16-bit numtrk (track count) value in the SLEN chunk. This overflow causes subsequent PBOD writes to exceed allocated track pointer bounds, resulting in heap buffer overflow. An attacker can craft a malicious OKT module file that triggers this condition, leading to memory corruption and potential arbitrary code execution.

## Affected products

- libmikmod libmikmod before 3.3.14

## Timeline

- 2026-10-06: disclosed

## References

- [https://github.com/sezero/mikmod](https://github.com/sezero/mikmod)
- [https://github.com/sezero/mikmod/blob/libmikmod-3.3.13/libmikmod/loaders/load_okt.c](https://github.com/sezero/mikmod/blob/libmikmod-3.3.13/libmikmod/loaders/load_okt.c)

## Related threats

- [libmikmod out-of-bounds read in MultiTracker loader](https://junglewise.ai/threats/cve-2026-111165-libmikmod-through-3-3-15-contains-a-global-out-of-bounds-read)
- [libmikmod heap out-of-bounds read in Impulse Tracker loader](https://junglewise.ai/threats/cve-2026-105838-libmikmod-before-3-3-14-contains-a-heap-out-of-bounds-read)
- [libmikmod integer overflow in DSM_Load](https://junglewise.ai/threats/cve-2026-105837-libmikmod-before-3-3-14-contains-an-integer-overflow)