Wind River Support Network

HomeDefectsLIN7-9022

Fixed

LIN7-9022 : Security Advisory - lame - CVE-2017-15018

Created: Oct 16, 2017 Updated: May 18, 2019

Resolved Date: Dec 24, 2018

Found In Version: 7.0.0.26

Fix Version: 7.0.0.30

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

LAME 3.99.5 has a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c.

https://nvd.nist.gov/vuln/detail/CVE-2017-15018

CVEs

CVE-2017-15018