Every CVE whose affected-product data names Glensawyer Mp3gain, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (3)
CVE-2021-34085 — CVSS 9.8 (critical): Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to…
CVE-2023-49356 — CVSS 7.5 (high): A stack buffer overflow vulnerability in MP3Gain v1.6.2 allows an attacker to cause a denial of service via the WriteMP3GainAPETag function…
CVE-2019-18359 — CVSS 5.5 (medium): A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads…