« List of all CVEs

CVE-2015-9099

Published: 6/25/2017 Last updated: 8/6/2024 Reserved: 6/25/2017

The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file with a negative sample rate.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (2)

conf-lame lame

Products affected (1)

Product Vendor Version
n/a n/a < 45bebbc8cea7d586a6216dc62814bdb380b9b29b

References (8)