Menu ▾ ▴

#43 Buffer overflow in apetag.c

v1.0 (example)
closed-fixed
nobody
None
5
2018-05-30
2018-05-07
Luigi Baldoni
No

Buffer overflow in the WriteMP3GainAPETag function in apetag.c

As per CVE-2018-10777. It refers to 1.5.2.r2 though, do you think it could still apply?

Discussion

  • Glen Sawyer

    Glen Sawyer - 2018-05-30

    Conversion to the libmpg123 library (version 1.6.x) seems to have taken care of this bug as well, at least based on the one crashing .mp3 sample file I have.
    Released new version and updated the website.

     

  • Glen Sawyer

    Glen Sawyer - 2018-05-30
    • status: open --> closed-fixed
     

Log in to post a comment.

MongoDB Logo MongoDB