Skip to content
OpenAdvisories
Unscored DLA-1017-1 1 CVE

mpg123 - security update

Published Jul 8, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 7 mpg123 1.14.4-1+deb7u2

Vulnerabilities 1

  • Unscored —

    In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted i…