CVE-2017-11126

The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.

• CWE-125

• http://openwall.com/lists/oss-security/2017/07/10/4Mailing List, Patch, Third Party Advisory
• https://blogs.gentoo.org/ago/2017/07/03/mpg123-global-buffer-overflow-in-iii_i_stereo-layer3-c/Patch, Third Party Advisory, VDB Entry
• http://openwall.com/lists/oss-security/2017/07/10/4Mailing List, Patch, Third Party Advisory
• https://blogs.gentoo.org/ago/2017/07/03/mpg123-global-buffer-overflow-in-iii_i_stereo-layer3-c/Patch, Third Party Advisory, VDB Entry

Published

Jul 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11119The chk_mem_access function in cpu/nes6502/nes6502.c in libn…
• CVE-2017-11120On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and othe…
• CVE-2017-11121On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and othe…
• CVE-2017-11122On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an atta…
• CVE-2017-11124libxar.so in xar 1.6.1 has a NULL pointer dereference in the…
• CVE-2017-11125libxar.so in xar 1.6.1 has a NULL pointer dereference in the…
• CVE-2017-11127Bolt CMS 3.2.14 allows stored XSS by uploading an SVG docume…
• CVE-2017-11128Bolt CMS 3.2.14 allows stored XSS via text input, as demonst…
• CVE-2017-11129An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-1113IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerab…
• CVE-2017-11130An issue was discovered in heinekingmedia StashCat through 1…
• CVE-2017-11131An issue was discovered in heinekingmedia StashCat through 1…