Stack-based buffer overflow in the delayed_output function in music.c in abcm2ps through 8.13.20 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
https://lists.debian.org/debian-lts-announce/2022/04/msg00015.html
https://github.com/leesavide/abcm2ps/issues/16
https://drive.google.com/drive/u/2/folders/1DvBEh5D-eW4UkvX3947UQh62i7hUIFN1