ZeroHour

CVE-2019-14247

PoC
CVSS 3.0
5.5 medium
EPSS
1%p70
Published
()
Modified
Description

The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.

Vendors
mpg321 project
Products
mpg321
Weakness
CWE-787
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.