Re: mpg123: global buffer overflow in III_i_stereo (layer3.c)

[Jonas Thiem <jonas@thiem.email>]

On 11.07.2017 10:02, Dr. Thomas Orgis wrote:
> My program accesses memory that belongs
> to my program … unless the compiler inserts forbidden zones in there.

So why do you know for sure that no program would store private keys or
other sensitive data there? Or is this only static data by the mp3
library itself?

It seems to me like this could still be a major security issue beyond a
simple denial of service.