Vulnerability Details CVE-2017-15046
LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.7%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
Products affected by CVE-2017-15046
-
cpe:2.3:a:lame_project:lame:3.97
-
cpe:2.3:a:lame_project:lame:3.98
-
cpe:2.3:a:lame_project:lame:3.98.2
-
cpe:2.3:a:lame_project:lame:3.98.4
-
cpe:2.3:a:lame_project:lame:3.99.4
-
cpe:2.3:a:lame_project:lame:3.99.5