Vulnerabilities > Mpg123 > High

DATE CVE VULNERABILITY TITLE RISK
2019-05-09 CVE-2017-12839 Out-of-bounds Read vulnerability in Mpg123
A heap-based buffer over-read in the getbits function in src/libmpg123/getbits.h in mpg123 through 1.25.5 allows remote attackers to cause a possible denial-of-service (out-of-bounds read) or possibly have unspecified other impact via a crafted mp3 file.
network
low complexity
mpg123 CWE-125
8.3
2017-08-29 CVE-2014-9497 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mpg123
Buffer overflow in mpg123 before 1.18.0.
network
low complexity
mpg123 CWE-119
7.5
2017-06-29 CVE-2017-10683 Out-of-bounds Read vulnerability in Mpg123 1.25.0
In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c.
network
low complexity
mpg123 CWE-125
7.5