CVE-2017-8419 in LAME
Summary
LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels.
Reservation
05/02/2017
Disclosure
05/02/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 100811 | LAME Audio Header memory corruption | 119 | Not defined | Not defined | CVE-2017-8419 |