MP
Product
Mpg123
16
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Mpg123 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12797 | 5.5 | Aug 29 | Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a… Affected: through 1.25.4 |
| CVE-2017-9545 | 5.5 | Jul 27 | The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file Affected: 1.24.0 |
| CVE-2017-11126 | 5.5 | Jul 10 | The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a… Affected: through 1.25.1 |
Showing 3