CVE-2003-0969: MPG321

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

mpg321 0.2.10 allows remote attackers to overwrite memory and possibly execute arbitrary code via an mp3 file that passes certain strings to the printf function, possibly triggering a format string vulnerability.

Affected products

• MPG321 MPG321: version 0.2.10 only

Published 2004-01-20. Last modified 2026-06-16.