CVE-2016-9264

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote...

5.5 MediumFix available

CVE-2016-9264 is a medium vulnerability (CVSS 5.5) in Libming, published January 26, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.71%, the 77th percentile. Fixed in ming 1:0.4.4-1.1+deb7u1.

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.71%Up 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Record: CVE-2016-9264
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Record: CVE-2016-9264
Updated: 2026-11-02

EUVDEUVD-2016-10075 No score

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Record: EUVD-2016-10075
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vcw4-gfjr-mhh9 5.5

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote...

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Record: GHSA-vcw4-gfjr-mhh9
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness: CWE-119
Updated: 2026-11-02

OSV 5.5

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Record: CVE-2016-9264
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-9264 5.5

Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.

Record: UBUNTU-CVE-2016-9264
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVMGASA-2017-0070 No score

Updated ming packages fix security vulnerability

Global-buffer-overflow in printMP3Headers. (CVE-2016-9264)

Divide-by-zero in printMP3Headers. (CVE-2016-9265)

Left shift in listmp3.c. (CVE-2016-9266)

Heap-based buffer overflow in _iprintf. (CVE-2016-9827)

NULL pointer dereference in dumpBuffer. (CVE-2016-9828)

Heap-based buffer overflow in parseSWF_DEFINEFONT. (CVE-2016-9829)

Heap-based buffer overflow in parseSWF_RGBA. (CVE-2016-9831)

Record: MGASA-2017-0070
Updated: 2026-11-02

Affected products

libming

Affected packages

Affected packages
Package	Affected	Fixed
`ming` Debian:7	before 1:0.4.4-1.1+deb7u1, plus listed versions 1:0.4.4-1.1	1:0.4.4-1.1+deb7u1
`ming` Mageia:5	before 0.4.5-8.1.mga5	0.4.5-8.1.mga5
`ming` Ubuntu:16.04:LTS	All versions, plus listed versions 1:0.4.5-1.2ubuntu21:0.4.5-1.2ubuntu51:0.4.5-1.2ubuntu61:0.4.5-1.2ubuntu7	None known

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 9 moreShow less