Lame Project
Lame Project Lame: vulnerabilidades y CVE
Lame Project Lame tiene 15 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE15
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2017-15046 | Media (5.5) | 0.73% | — | 6 oct 2017 | LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412. |
| CVE-2017-15045 | Media (5.5) | 0.90% | — | 6 oct 2017 | LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different… |
| CVE-2017-15019 | Alta (7.8) | 1.1% | — | 5 oct 2017 | LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call. |
| CVE-2017-15018 | Media (5.5) | 0.84% | — | 5 oct 2017 | LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c. |
| CVE-2017-13712 | Alta (7.5) | 1.7% | — | 28 ago 2017 | NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument. |
| CVE-2017-11720 | Crítica (9.8) | 2.5% | — | 28 jul 2017 | There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file. |
| CVE-2017-9412 | Media (5.5) | 4.0% | — | 27 jul 2017 | The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file. |
| CVE-2017-9872 | Alta (7.8) | 9.8% | — | 25 jun 2017 | The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application… |
| CVE-2017-9871 | Alta (7.8) | 1.5% | — | 25 jun 2017 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or… |
| CVE-2017-9870 | Media (5.5) | 1.2% | — | 25 jun 2017 | The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted… |
| CVE-2017-9869 | Media (5.5) | 4.1% | — | 25 jun 2017 | The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted… |
| CVE-2015-9101 | Media (5.5) | 1.8% | — | 25 jun 2017 | The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
| CVE-2015-9100 | Media (5.5) | 1.4% | — | 25 jun 2017 | The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted audio file. |
| CVE-2015-9099 | Media (5.5) | 1.4% | — | 25 jun 2017 | The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted audio file with a negative sample rate. |
| CVE-2017-8419 | Alta (7.8) | 1.5% | — | 2 may 2017 | LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or… |