CVE-2017-14412

High

Published: 13/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An invalid memory write was discovered in copy_mp in mpglibDBL, used in MP3Gain version 1.5.2. The vulnerability may cause a denial of service (segmentation fault and application crash) or possibly unspecified other impact.

Risk Assessment

The organization may experience application downtime, which could affect the availability of services related to MP3 file processing.

Recommendation

It is recommended to update MP3Gain to the latest version to mitigate this vulnerability and to monitor systems for potential crashes.

Other vulnerabilities in MP3Gain 1.5.2

CVE-2017-14411High
A stack-based buffer overflow was discovered in copy_mp in mpglibDBL, used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, leading to remote denial of service or possibly code execution.

Original NVD description (English source)

An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service (segmentation fault and application crash) or possibly unspecified other impact.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS