Vulnerability index

Browse CVEs

14 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Lame MEDIUM 5.5
CVE-2017-15045

LAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, rel…

No fix yet
Fix from $1,600 2017-10-06
Lame MEDIUM 5.5
CVE-2017-15046

LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vul…

No fix yet
Fix from $1,600 2017-10-06
Lame HIGH 7.8
CVE-2017-15019

LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of …

No fix yet
Fix from $1,950 2017-10-05
Lame MEDIUM 5.5
CVE-2017-15018

LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_…

No fix yet
Fix from $1,600 2017-10-05
Lame HIGH 7.5
CVE-2017-13712

NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by…

Mitigation only
Fix from $1,950 2017-08-28
Lame CRITICAL 9.8
CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.

No fix yet
Fix from $2,300 2017-07-28
Lame MEDIUM 5.5
CVE-2017-9412

The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and…

No fix yet
Fix from $1,600 2017-07-27
Lame HIGH 7.8
CVE-2017-9871

The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a den…

Mitigation only
Fix from $1,950 2017-06-25
Lame HIGH 7.8
CVE-2017-9872EPSS 10%

The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to ca…

No fix yet
Fix from $1,950 2017-06-25
Lame MEDIUM 5.5
CVE-2015-9099

The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid read and applica…

Mitigation only
Fix from $1,600 2017-06-25
Lame MEDIUM 5.5
CVE-2015-9100

The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of service (NULL pointer derefer…

Mitigation only
Fix from $1,600 2017-06-25
Lame MEDIUM 5.5
CVE-2015-9101

The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remo…

No fix yet
Fix from $1,600 2017-06-25
Lame MEDIUM 5.5
CVE-2017-9869

The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a deni…

No fix yet
Fix from $1,600 2017-06-25
Lame MEDIUM 5.5
CVE-2017-9870

The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a den…

Mitigation only
Fix from $1,600 2017-06-25