rpm package
almalinux/mpg123
pkg:rpm/almalinux/mpg123
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-10573 | Med | 6.7 | < 1.32.9-1.el8_10 | 1.32.9-1.el8_10 | Oct 31, 2024 | An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exp |
- affected < 1.32.9-1.el8_10fixed 1.32.9-1.el8_10
An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exp