RSS   Podatności dla 'LAME'   RSS

2017-10-06
 
CVE-2017-15046

 
 
LAME 3.99.5 has a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412.

 
 
CVE-2017-15045

CWE-125
 
 
LAME 3.99.5 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410.

 
2017-10-04
 
CVE-2017-15019

 
 
LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.

 
 
CVE-2017-15018

CWE-125
 
 
LAME 3.99.5 has a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c.

 
2017-08-28
 
CVE-2017-13712

 
 
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument.

 
2017-07-28
 
CVE-2017-11720

 
 
There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.

 
2017-07-27
 
CVE-2017-9412

 
 
The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.

 
 
CVE-2017-9411

 
 
The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.

 
 
CVE-2017-9410

 
 
The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file.

 
2017-06-25
 
CVE-2017-9872

 
 
The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

 

Copyright 2024, cxsecurity.com

 

Back to Top