7.8
CVSSv3

CVE-2017-15019

Published: 05/10/2017 Updated: 12/10/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.

Vulnerable Product Search on Vulmon Subscribe to Product

lame project lame 3.99.5

Vendor Advisories

LAME before 3100 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interfacec via a malformed mpg file, because of an incorrect calloc call ...