mpg123 vulnerabilities

CVEs whose affected-version data names the mpg123 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-10573Medium· 6.7

2y ago

Mpg123: buffer overflow when writing decoded pcm samples

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is no…

▾ SunlitRed Hat · mpg123EPSS 0.35%via CVEORG