lame project lame 3.99.5 vulnerabilities and exploits

(subscribe to this query)

5.5

CVSSv3

LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412.

Lame Project Lame 3.97 Lame Project Lame 3.98 Lame Project Lame 3.98.2 Lame Project Lame 3.98.4 Lame Project Lame 3.99.4 Lame Project Lame 3.99.5

5.5

CVSSv3

The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote malicious users to cause a denial of service (invalid memory read and application crash) via a crafted wav file.

Lame Project Lame 3.99.5

1 EDB exploit

5.5

CVSSv3

The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote malicious users to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "...

Lame Project Lame 3.99.5

7.8

CVSSv3

The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote malicious users to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted au...

Lame Project Lame 3.99.5

7.8

CVSSv3

The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote malicious users to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a c...

Lame Project Lame 3.99.5

1 EDB exploit

7.5

CVSSv3

NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows malicious users to perform Denial of Service by triggering a NULL first argument.

Lame Project Lame 3.99.5

7.8

CVSSv3

LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.

Lame Project Lame 3.99.5

9.8

CVSSv3

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.

Lame Project Lame 3.99.5

5.5

CVSSv3

The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote malicious users to cause a denial of service (invalid read and application crash) via a crafted audio file with a negative sample rate.

Lame Project Lame 3.99.5

5.5

CVSSv3

LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410.

Lame Project Lame 3.99.5

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook