Filtered by vendor Lame Project
Subscribe
Search
Total
5 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2017-15019 | 1 Lame Project | 1 Lame | 2017-10-12 | 6.8 MEDIUM | 7.8 HIGH |
| LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call. | |||||
| CVE-2017-13712 | 1 Lame Project | 1 Lame | 2017-09-01 | 5.0 MEDIUM | 7.5 HIGH |
| NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument. | |||||
| CVE-2017-9872 | 1 Lame Project | 1 Lame | 2017-08-12 | 6.8 MEDIUM | 7.8 HIGH |
| The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. | |||||
| CVE-2017-9871 | 1 Lame Project | 1 Lame | 2017-06-29 | 6.8 MEDIUM | 7.8 HIGH |
| The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file. | |||||
| CVE-2017-8419 | 1 Lame Project | 1 Lame | 2017-05-16 | 6.8 MEDIUM | 7.8 HIGH |
| LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels. | |||||