CVE-2017-11720

There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-07-28

Last modified

2024-08-05

Weaknesses

CWE-369

Affected products

• Lame (Lame Project)

References

• https://blogs.gentoo.org/ago/2017/06/17/lame-divide-by-zero-in-parse_wave_header-get_audio-c/
• https://bugs.debian.org/777159
• https://sourceforge.net/p/lame/bugs/460/