tocsin

Debian/mp3gain: medium 5.5

The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file.

Action: Upgrade mp3gain to 1.6.2-1 or later.

Affected

introducedfixedlast affected
01.6.2-1-

Fixed versions

1.6.2-1

Sources

published · modified · JSON