CVE-2017-13712

NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers to perform Denial of Service by triggering a NULL first argument.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-08-28

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Lame (Lame Project)

References

• http://www.securityfocus.com/bid/100525
• https://sourceforge.net/p/lame/bugs/472/