CVE-2017-14406

Name of the Vulnerable Software and Affected Versions MP3Gain version 1.5.2

Description A NULL pointer dereference was discovered in the sync buffer function in interface.c in mpglibDBL, which is used in MP3Gain. This issue causes a segmentation fault and application crash, leading to a remote denial of service.

Recommendations For MP3Gain version 1.5.2, consider disabling the sync buffer function in interface.c as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.