Browse CVEs

HIGH 7.8 CVE-2018-10776 The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and a… Mp3gain after 1.5.2 Fix from $1,9502018-05-07 HIGH 7.8 CVE-2018-10777 Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (appl… Mp3gain after 1.5.2 Fix from $1,9502018-05-07 HIGH 7.8 CVE-2018-10778 Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a deni… Mp3gain after 1.5.2 Fix from $1,9502018-05-07 HIGH 7.8 CVE-2017-14409 A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out… Mp3gain Mitigation only Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14411 A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an ou… Mp3gain Mitigation only Fix from $1,9502017-09-13 HIGH 7.8 CVE-2017-14412 An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of… Mp3gain Mitigation only Fix from $1,9502017-09-13 MEDIUM 5.5 CVE-2017-14406 A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a se… Mp3gain Mitigation only Fix from $1,6002017-09-13 MEDIUM 5.5 CVE-2017-14407 A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The vulnerability causes an application cras… Mp3gain Mitigation only Fix from $1,6002017-09-13 MEDIUM 5.5 CVE-2017-14408 A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an applic… Mp3gain Mitigation only Fix from $1,6002017-09-13 MEDIUM 5.5 CVE-2017-14410 A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application… Mp3gain Mitigation only Fix from $1,6002017-09-13 MEDIUM 5.5 CVE-2017-12911 The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file. Mp3gain Mitigation only Fix from $1,6002017-09-07 MEDIUM 5.5 CVE-2017-12912 The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file. Mp3gain Mitigation only Fix from $1,6002017-09-07