Vulnerabilities > Lame Project > Lame > 3.98

DATE CVE VULNERABILITY TITLE RISK
2017-10-06 CVE-2017-15046 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Lame Project Lame
LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpack_read_samples in frontend/get_audio.c, a different vulnerability than CVE-2017-9412.
4.3
2017-10-05 CVE-2017-15018 Out-of-bounds Read vulnerability in Lame Project Lame
LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k_34_4 in vbrquantize.c.
4.3
2017-06-25 CVE-2015-9101 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Lame Project Lame
The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4 and 3.99.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
4.3