https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-49356.htmlhttps://patchthecve.com/cve/CVE-2023-49356.htmlWed, 17 Jun 2026 06:35:52 +0000HIGH 7.5: A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function at apetag.c:592.https://patchthecve.com/cve/CVE-2021-34085.htmlhttps://patchthecve.com/cve/CVE-2021-34085.htmlWed, 17 Jun 2026 03:55:28 +0000CRITICAL 9.8: Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872. CVE-2017-14409, and CVE-2018https://patchthecve.com/cve/CVE-2019-18359.htmlhttps://patchthecve.com/cve/CVE-2019-18359.htmlWed, 17 Jun 2026 02:24:54 +0000MEDIUM 5.5: A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service.