Priority LOW 36
Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other im…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.0107 · Published 2018-05-07 · No fix listed CWE-125
Priority LOW 36
Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00979 · Published 2018-05-07 · No fix listed CWE-119
Priority LOW 36
The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01005 · Published 2018-05-07 · No fix listed CWE-20
Priority LOW 36
An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.00812 · Published 2017-09-13 · No fix listed CWE-787
Priority LOW 37
A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01703 · Published 2017-09-13 · No fix listed CWE-787
Priority LOW 27
A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00891 · Published 2017-09-13 · No fix listed CWE-125
Priority LOW 37
A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01628 · Published 2017-09-13 · No fix listed CWE-787
Priority LOW 27
A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01117 · Published 2017-09-13 · No fix listed CWE-125
Priority LOW 27
A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01117 · Published 2017-09-13 · No fix listed CWE-125
Priority LOW 27
A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00891 · Published 2017-09-13 · No fix listed CWE-476
Priority LOW 26
The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00691 · Published 2017-09-07 · No fix listed CWE-119
Priority LOW 26
The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00851 · Published 2017-09-07 · No fix listed CWE-119