CVE-2025-47256 | Libxmp up to 4.6.2 Tracker Module loaders/prowizard/pha.c depack_pha integer underflow (ID 847)

A vulnerability was found in Libxmp up to 4.6.2. It has been classified as problematic. Affected is the function depack_pha of the file loaders/prowizard/pha.c of the component Tracker Module. The manipulation leads to integer underflow.

This vulnerability is traded as CVE-2025-47256. The attack needs to be approached locally. There is no exploit available.