tocsin

Debian/mpg123: medium 6.7

An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happe

Action: Upgrade mpg123 to 1.31.2-1+deb12u1 or later.

Affected

introducedfixedlast affected
01.31.2-1+deb12u1-

Fixed versions

1.31.2-1+deb12u1

Sources

published · modified · JSON