Skip to content
OpenAdvisories
High · 7.5 CVE-2023-49356 EUVD-2023-53339GHSA-9vwc-6w53-v9f8

A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function…

Published Dec 22, 2023 · Updated Apr 23, 2025 · Assigned by mitre

Description

A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag.c:592.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 mp3gain 1.6.2-2 —
Debian 13 mp3gain 1.6.2-2 —
Debian 12 mp3gain 1.6.2-2 —

References