Gentoo Linux Security Advisory GLSA 200608-14 – Luigi Auriemma found a heap-based buffer overflow in the it_read_envelope function which reads the envelope values for volume, pan and pitch of the instruments referenced in a .it (Impulse Tracker) file with a large number of nodes. Versions less than 0.9.3-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49125/glsa-200608-14.txt
Source: https://packetstormsecurity.com/files/49125/Gentoo-Linux-Security-Advisory-200608-14.html