CVE-2017-9869

CVE-2017-9869 affects the LAME mpglib/libmpgdecoder layer2.c II_step_one function, where a crafted audio file can trigger a buffer over-read and crash the application (denial of service). Public advisories in openSUSE list CVE-2017-9869 among fixes when upgrading lame to version 3.100, indicating...

CVE-2017-9869

The IIstepone function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted audio file...