DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
The affected component is libopenmpt before version 0.4.2. Systems using libopenmpt0 should be checked for an installed version earlier than 0.4.2.
An attacker needs to cause the target to parse a crafted DSM file. No privileges are required, but user interaction is required according to the CVSS vector.
Successful exploitation can cause an assertion failure and denial of service during file parsing. The provided CVSS data indicates no confidentiality or integrity impact.
Apply the available patch by updating libopenmpt to a fixed release. The referenced libopenmpt security update identifies 0.4.2 as the relevant fixed version for this issue.