265 matches found
CVE-2017-15019
CVE-2017-15019 affects LAME 3.99.5, where a NULL pointer dereference occurs in hip_decode_init in libmp3lame/mpglib_interface.c during processing of a malformed MPG file due to an incorrect calloc. Reported across multiple advisories and distributions, the issue is mitigated by upgrading to later...
CVE-2017-15018
LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k344 in vbrquantize.c...
CVE-2017-15019
LAME 3.99.5 has a NULL Pointer Dereference in the hipdecodeinit function within libmp3lame/mpglibinterface.c via a malformed mpg file, because of an incorrect calloc call...
CVE-2017-15018
CVE-2017-15018 affects LAME up to 3.99.5 (and older 3.99./3.98. ) with a heap-based buffer over-read in k_34_4 within vbrquantize.c when processing malformed input. Impact described in sources as potential memory corruption leading to denial of service. Affected components: LAME encoder libraries...
CVE-2017-15019
LAME 3.99.5 has a NULL Pointer Dereference in the hipdecodeinit function within libmp3lame/mpglibinterface.c via a malformed mpg file, because of an incorrect calloc call...
CVE-2017-15018
LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k344 in vbrquantize.c...
PT-2017-13821 · Lame +3 · Lame +3
Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: The issue is related to a NULL Pointer Dereference in the hip decode init function within libmp3lame/mpglib interface.c. This occurs when processing a malformed mpg file, due to an incorrect calloc call...
PT-2017-13820 · Lame +2 · Lame +2
Name of the Vulnerable Software and Affected Versions: LAME versions 3.98 through 3.99.5 Description: The issue is a heap-based buffer over-read that occurs when handling a malformed file in the k 34 4 function within the vbrquantize.c file. Recommendations: For LAME versions 3.98 through 3.99.5,...
Security update for ffmpeg, ffmpeg2 (important)
This update introduces lame and twolame. For ffmpeg2 it updates to version 2.8.13 and fixes several issues. These security issues were fixed: - CVE-2017-14058: The readdata function in libavformat/hls.c did not restrict reload attempts for an insufficient list, which allowed remote attackers to...
LAME 'id3v2AddAudioDuration' function null pointer reference denial of service vulnerability
LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in the 'id3v2AddAudioDuration' function in the libmp3lame/id3tag.c file in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service null pointer...
CVE-2017-13712
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
CVE-2017-13712
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
CVE-2017-13712
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
Null pointer dereference
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
CVE-2017-13712
CVE-2017-13712 is a NULL pointer dereference vulnerability in LAME 3.99.5 (libmp3lame/id3tag.c, id3v2AddAudioDuration) that can cause a Denial of Service. Connected advisories indicate the issue is addressed in later LAME updates (e.g., LAME 3.100) across multiple distributions (openSUSE, Ubuntu ...
CVE-2017-13712
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
CVE-2017-13712
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument...
PT-2017-13038 · Lame +3 · Lame +3
Name of the Vulnerable Software and Affected Versions: LAME version 3.99.5 Description: The issue is related to a NULL Pointer Dereference in the id3v2AddAudioDuration function, located in libmp3lame/id3tag.c. This allows attackers to trigger a Denial of Service by passing a NULL value as the fir...
LAME denial of service vulnerability
LAME is LAME team developed a set of open source MP3 audio compression software . A security vulnerability exists in LAME version 3.99.5. An attacker can exploit this vulnerability to cause a denial of service except for a zero error with a malformed input file...