tocsin

Alpine/lame: medium 5.5

The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted wav file.

Action: Upgrade lame to 3.99.5-r6 or later.

Affected

introducedfixedlast affected
03.99.5-r6-

Fixed versions

3.99.5-r6

Sources

published · modified · JSON