CVE-2017-15045

LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to…

published October 6, 2017

CVSS
—
EPSS
1%
Percentile
58.9
In the wild
Unconfirmed
What it is

LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00897 · 58.9th percentile
Published
2017-10-06T04:00Z
EPSS history
Timeline
  • 06 OCT 04:00Z
    LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to…
    cvelistv5