| Package | Affected versions | Patched versions |
|---|---|---|
| mpg123 | ≤ 1.25.1 |
The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free