VDB
CVE-2021-34085
CVE-2021-34085
PUBLISHED
Read access violation in the III_dequantize_sample function in mpglibDBL/layer3.c in mp3gain through 1.5.2-r2 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, a different vulnerability than CVE-2017-9872. CVE-2017-14409, and CVE-2018-10778.
EPSS 0.59% · 69.6th percentile
Risk Scores
EPSS Score
0.59%
69.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:22.04:LTS | mp3gain | 1.6.2-2, 0 |
| Ubuntu:25.10 | mp3gain | 1.6.2-2build1, 0 |
| Ubuntu:24.04:LTS | mp3gain | 1.6.2-2, 0, 1.6.2-2build1 |
Exploit Intelligence
Timeline
- May 11, 2022 CVE Published
- May 12, 2022 EPSS Score
- Jun 30, 2022 EPSS Score
- Aug 19, 2022 EPSS Score
- Oct 8, 2022 EPSS Score
- Nov 26, 2022 EPSS Score
- Mar 4, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 23, 2023 EPSS Score
- Jun 11, 2023 EPSS Score
- Jul 30, 2023 EPSS Score
- Sep 17, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-34085 third-party-advisory
- https://drive.google.com/drive/folders/1epm65c4_iC0zE5V_leoet4Jyk1Prz2p5?usp=sharing third-party-advisory
- http://mp3gain.com third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-34085 third-party-advisory