CVE-2017-9545

The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file.

• CWE-125

• http://seclists.org/fulldisclosure/2017/Jul/65Exploit, Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2017/Jul/65Exploit, Mailing List, Third Party Advisory

Published

Jul 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9536IrfanView version 4.44 (32bit) with FPX Plugin 4.46 allows a…
• CVE-2017-9537Persistent cross-site scripting (XSS) in the Add Node functi…
• CVE-2017-9538The 'Upload logo from external path' function of SolarWinds …
• CVE-2017-9542D-Link DIR-615 Wireless N 300 Router allows authentication b…
• CVE-2017-9543register.ghp in EFS Software Easy Chat Server versions 2.0 t…7.5
• CVE-2017-9544There is a remote stack-based buffer overflow (SEH) in regis…9.8
• CVE-2017-9546admin.php in BigTree through 4.2.18 allows remote authentica…
• CVE-2017-9547admin.php in BigTree through 4.2.18 has a Cross-site Scripti…
• CVE-2017-9548admin.php in BigTree through 4.2.18 has a Cross-site Scripti…
• CVE-2017-9551Mahara 15.04 before 15.04.14 and 16.04 before 16.04.8 and 16…
• CVE-2017-9552A design flaw in authentication in Synology Photo Station 6.…
• CVE-2017-9553A design flaw in SYNO.API.Encryption in Synology DiskStation…