Related Vulnerabilities: CVE-2017-13712  

NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME before 3.100 allows attackers to perform denial of service by triggering a NULL first argument.

Severity Medium

Remote Yes

Type Denial of service

Description

NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME before 3.100 allows attackers to perform denial of service by triggering a NULL first argument.

AVG-330 lame 3.99.5-3 3.100-1 High Fixed FS#54859

https://sourceforge.net/p/lame/bugs/472/