CVE-2017-15046

MEDIUM

LAME 3.97-3.99.5 - Stack-based Buffer Overflow in unpack_read_samples

Title source: llm

Description

LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412.

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://sourceforge.net/p/lame/bugs/479/

Scores

CVSS v3 5.5

EPSS 0.0073

EPSS Percentile 49.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-119

Status published

Products (6)

lame_project/lame 3.97

lame_project/lame 3.98

lame_project/lame 3.98.2

lame_project/lame 3.98.4

lame_project/lame 3.99.4

lame_project/lame 3.99.5

Published Oct 06, 2017

Tracked Since Feb 18, 2026