CVE-2017-8419
HighSummary
LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, allowing remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file.
Risk Assessment
Attackers may exploit this vulnerability to disrupt system operations, potentially leading to service downtime or data loss.
Recommendation
It is recommended to update LAME to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in LAME
See all- CVE-2017-15019High
LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c triggered by a malformed mpg file due to an incorrect calloc call.
- CVE-2017-13712High
The id3v2AddAudioDuration function in LAME 3.99.5 has a NULL Pointer Dereference, allowing attackers to trigger Denial of Service by passing NULL as the first argument.
- CVE-2017-11720Critical
There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
Original NVD description (English source)
LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels.