CVE-2019-14247 (NVD)

2019-07-24

The scan() function in mad.c in mpg321 0.3.2 allows remote attackers to trigger an out-of-bounds write via a zero bitrate in an MP3 file.

Products Mpg321
Type Out-of-bounds Write (CWE-787)
First patch - None (likely due to unavailable code)
Links https://sourceforge.net/p/mpg321/bugs/51/