CVE-2019-14247
MEDIUMmpg321 0.3.2 - Out-of-bounds Write via Zero Bitrate in MP3 File
Title source: llmDescription
The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://sourceforge.net/p/mpg321/bugs/51/
Scores
CVSS v3
5.5
EPSS
0.0137
EPSS Percentile
68.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (1)
mpg321_project/mpg321
0.3.2
Published
Jul 24, 2019
Tracked Since
Feb 18, 2026