Mpg321
1 CVEs
product
Monthly
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
Memory Corruption
Mpg321
NVD
CVSS 3.0
5.5
EPSS
1.4%
EPSS 1%
CVSS 5.5
MEDIUM
POC
This Month
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
Memory Corruption
Mpg321
NVD