libopenmpt security updates 0.8.10, 0.7.22, 0.6.31
The OpenMPT/libopenmpt project released the latest stable libopenmpt version:
libopenmpt 0.8.10 (2026-10-31)
-
[Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25831).
-
[Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
-
Volume column portamento effect memory was not updated properly during seeking, causing notes to continue playing at the wrong pitch.
The changelog for older versions can be found at https://lib.openmpt.org/doc/changelog.html .
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.8.10+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.8.10+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.8.10+release.msvc.zip
Binary download links:
- Windows 10 21H2 / Windows 7 SP1 (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.10+release.bin.windows.zip
- Windows XP SP1 (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.10+release.bin.retro.winxp.zip
- Windows 98 + KernelEx (RETRO) (openmpt123, xmp-openmpt, in_openmpt): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.10+release.bin.retro.win98.zip
- Windows 95 (RETRO) (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.10+release.bin.retro.win95.zip
- DOS 5 (openmpt123): https://lib.openmpt.org/files/libopenmpt/bin/libopenmpt-0.8.10+release.bin.dos.zip
Development library download links:
- Windows 10 21H2 / Windows 7 SP1: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.8.10+release.dev.windows.vs2022.zip
- Windows XP SP1 (RETRO): https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.8.10+release.dev.windows.retro.winxp.zip
- WebAssembly / Javascript: https://lib.openmpt.org/files/libopenmpt/dev/libopenmpt-0.8.10+release.dev.js.tar.gz
Documentation download links:
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.7.22 (2026-10-31)
-
[Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25832).
-
[Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.22+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.22+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.7.22+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The OpenMPT/libopenmpt project also released an update to the old libopenmpt 0.6 stable branch:
libopenmpt 0.6.31 (2026-10-31)
-
[Sec] SymMOD: Potential divison by 0 when trying to decode an embedded IMA ADPCM WAV sample claiming to contain 0 audio channels (r25833).
-
[Bug] SymMOD: It was possible that a fact chunk of an embedded WAV file claimed an impossibly big sample length for an IMA ADPCM sample, causing unnecessarily large memory allocations.
Source code download links:
- Autotools: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.31+release.autotools.tar.gz
- Makefile / Android NDK: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.31+release.makefile.tar.gz
- Visual Studio: https://lib.openmpt.org/files/libopenmpt/src/libopenmpt-0.6.31+release.msvc.zip
Documentation and binary downloads can be found at the libopenmpt website at https://lib.openmpt.org/libopenmpt/.
The security issue fixed in libopenmpt 0.8, 0.7, 0.6 does not affect the earlier libopenmpt 0.5, 0.4 branches.
The following libopenmpt and libopenmpt-modplug versions are currently supported with security fixes by the OpenMPT/libopenmpt project:
- libopenmpt 0.8.10
- Current stable version.
- Receives security updates.
- Receives minor playback fixes.
- libopenmpt 0.7.22
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.6.31
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.5.44
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.4.56
- Old stable version.
- Receives security updates.
- Receives trivial bug fixes.
- libopenmpt 0.9 (SVN trunk)
- development
- security updates
- playback fixes
- new features
- new file formats
- libopenmpt-modplug 0.8.9.0-openmpt1
- Receives security updates.
- libopenmpt-modplug 0.8.8.5-openmpt1
- Receives security updates.
Please update to the newest versions.