CVE-2019-18359

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A buffer over-read was discovered in ReadMP3APETag in apetag.c in MP3Gain 1.6.2. The vulnerability causes an application crash, which leads to remote denial of service.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Oct 23, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-18367.1A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow CVE-2019-183605.3In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.CVE-2019-183615.3JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.CVE-2019-183625.3JetBrains MPS before 2019.2.2 exposed listening ports to the network.CVE-2019-183635.3In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumsta CVE-2019-183649.8In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.CVE-2019-183654.3In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.CVE-2019-183665.3In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.CVE-2019-183675.3In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.CVE-2019-183687.3In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.CVE-2019-183695.3In JetBrains YouTrack before 2019.2.55152, removing tags from the issues list without the corresponding permission was possible.CVE-2019-18377.5A vulnerability in the User Data Services (UDS) API of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, rem