PatchTheCVE: mp3gainhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-10778: Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 https://patchthecve.com/cve/CVE-2018-10778.htmlhttps://patchthecve.com/cve/CVE-2018-10778.htmlWed, 17 Jun 2026 01:34:40 +0000HIGH 7.8: Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872 and CVE-2017-14409.CVE-2018-10777: Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attachttps://patchthecve.com/cve/CVE-2018-10777.htmlhttps://patchthecve.com/cve/CVE-2018-10777.htmlWed, 17 Jun 2026 01:34:40 +0000HIGH 7.8: Buffer overflow in the WriteMP3GainAPETag function in apetag.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.CVE-2018-10776: The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denihttps://patchthecve.com/cve/CVE-2018-10776.htmlhttps://patchthecve.com/cve/CVE-2018-10776.htmlWed, 17 Jun 2026 01:34:39 +0000HIGH 7.8: The getbits function in mpglibDBL/common.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (segmentation fault and application crash) or possibly have unspecified other impact.CVE-2017-14412: An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.https://patchthecve.com/cve/CVE-2017-14412.htmlhttps://patchthecve.com/cve/CVE-2017-14412.htmlWed, 17 Jun 2026 01:06:05 +0000HIGH 7.8: An invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a denial of service (segmentation fault and application crash) or possibly unspecified other impact.CVE-2017-14411: A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain versiohttps://patchthecve.com/cve/CVE-2017-14411.htmlhttps://patchthecve.com/cve/CVE-2017-14411.htmlWed, 17 Jun 2026 01:06:05 +0000HIGH 7.8: A stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.CVE-2017-14410: A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2https://patchthecve.com/cve/CVE-2017-14410.htmlhttps://patchthecve.com/cve/CVE-2017-14410.htmlWed, 17 Jun 2026 01:06:05 +0000MEDIUM 5.5: A buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service.CVE-2017-14409: A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain versionhttps://patchthecve.com/cve/CVE-2017-14409.htmlhttps://patchthecve.com/cve/CVE-2017-14409.htmlWed, 17 Jun 2026 01:06:05 +0000HIGH 7.8: A buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an out-of-bounds write, which leads to remote denial of service or possibly code execution.CVE-2017-14408: A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.https://patchthecve.com/cve/CVE-2017-14408.htmlhttps://patchthecve.com/cve/CVE-2017-14408.htmlWed, 17 Jun 2026 01:06:05 +0000MEDIUM 5.5: A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service.CVE-2017-14407: A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2https://patchthecve.com/cve/CVE-2017-14407.htmlhttps://patchthecve.com/cve/CVE-2017-14407.htmlWed, 17 Jun 2026 01:06:05 +0000MEDIUM 5.5: A stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service.CVE-2017-14406: A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain versihttps://patchthecve.com/cve/CVE-2017-14406.htmlhttps://patchthecve.com/cve/CVE-2017-14406.htmlWed, 17 Jun 2026 01:06:05 +0000MEDIUM 5.5: A NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service.CVE-2017-12912: The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violationhttps://patchthecve.com/cve/CVE-2017-12912.htmlhttps://patchthecve.com/cve/CVE-2017-12912.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 5.5: The "mpglibDBL/layer3.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a read access violation when opening a crafted MP3 file.CVE-2017-12911: The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when ophttps://patchthecve.com/cve/CVE-2017-12911.htmlhttps://patchthecve.com/cve/CVE-2017-12911.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 5.5: The "apetag.c" file in MP3Gain 1.5.2.r2 has a vulnerability which results in a stack memory corruption when opening a crafted MP3 file.