Wind River Support Network

HomeDefectsLIN7-9019

Fixed

LIN7-9019 : Security Advisory - lame - CVE-2017-15045

Created: Oct 16, 2017 Updated: May 18, 2019

Resolved Date: Dec 24, 2018

Found In Version: 7.0.0.26

Fix Version: 7.0.0.30

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

LAME 3.99.5 has a heap-based buffer over-read in fill_buffer in libmp3lame/util.c, related to lame_encode_buffer_sample_t in libmp3lame/lame.c, a different vulnerability than CVE-2017-9410.

https://nvd.nist.gov/vuln/detail/CVE-2017-15045

CVEs

CVE-2017-15045