CVE-2017-14409

Name of the Vulnerable Software and Affected Versions MP3Gain version 1.5.2

Description A buffer overflow was discovered in the III dequantize sample function in layer3.c in mpglibDBL, which is used in MP3Gain. This issue causes an out-of-bounds write, potentially leading to remote denial of service or possibly code execution.

Recommendations For MP3Gain version 1.5.2, consider disabling the III dequantize sample function in layer3.c as a temporary workaround until a patch is available. Restrict access to the mpglibDBL library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.