CVE-2009-3170: Aimp AIMP2 Audio Converter

High severity, CVSS 9.3. EPSS: 15.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in AIMP2 Audio Converter 2.53 (build 330) and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long File1 argument in a (1) .pls or (2) .m3u playlist file.

Affected products

• Aimp AIMP2 Audio Converter: up to and including 2.53

Published 2009-09-11. Last modified 2026-06-16.