Vulnerability Details CVE-2017-15018
LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.7%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
Products affected by CVE-2017-15018
-
cpe:2.3:a:lame_project:lame:3.98
-
cpe:2.3:a:lame_project:lame:3.98.2
-
cpe:2.3:a:lame_project:lame:3.98.4
-
cpe:2.3:a:lame_project:lame:3.99
-
cpe:2.3:a:lame_project:lame:3.99.1
-
cpe:2.3:a:lame_project:lame:3.99.2
-
cpe:2.3:a:lame_project:lame:3.99.3
-
cpe:2.3:a:lame_project:lame:3.99.4
-
cpe:2.3:a:lame_project:lame:3.99.5