Medium severity5.5NVD Advisory· Published Oct 23, 2019· Updated Jun 17, 2026

CVE-2019-18359

Description

A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

MP3Gain/MP3Gaindescription
osv-coords3 versions
pkg:rpm/opensuse/mp3gain&distro=openSUSE%20Leap%2015.1 pkg:rpm/opensuse/mp3gain&distro=openSUSE%20Tumbleweed pkg:rpm/suse/mp3gain&distro=SUSE%20Package%20Hub%2015%20SP1
< 1.6.2-lp151.3.3.1+ 2 more
- (no CPE)range: < 1.6.2-lp151.3.3.1
- (no CPE)range: < 1.6.2-2.9
- (no CPE)range: < 1.6.2-bp151.4.3.1

Patches

Vulnerability mechanics

References

sourceforge.net/p/mp3gain/bugs/46/nvdExploitThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2020-04/msg00025.htmlnvd
lists.opensuse.org/opensuse-security-announce/2020-04/msg00030.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000