CVE-2021-34085: Glensawyer MP3GAIN

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872. CVE-2017-14409, and CVE-2018-10778.

Affected products

• Glensawyer MP3GAIN: before 1.5.2 (fixed in 1.5.2); version 1.5.2 only

Published 2022-05-11. Last modified 2026-06-17.