CVE-2017-14408

A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-09-13

Last modified

2024-09-17

Weaknesses

CWE-125

Affected products

• Mp3gain (Mp3gain)

References

• https://blogs.gentoo.org/ago/2017/09/08/mp3gain-stack-based-buffer-overflow-in-dct36-mpglibdbllayer3-c/