« List of all CVEs

CVE-2017-9872

Published: 6/25/2017 Last updated: 8/5/2024 Reserved: 6/25/2017

The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (2)

conf-lame lame

Products affected (1)

Product Vendor Version
n/a n/a 24.0 ap379782

References (6)