libopenmpt prior to 0.3.13 allows a crash with malformed MED files.
openmpt libopenmpt
opensuse leap 15.0
opensuse leap 15.1