CVE-2009-1944

CVE-2009-1944 is a critical stack-based buffer overflow vulnerability affecting AIMP 2.51 build 330. This flaw allows remote attackers to execute arbitrary code by crafting a malicious MP3 file containing an overly long ID3 tag. With a CVSS score of 9.3, it presents a high severity risk, as it can be exploited remotely with medium attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.