LAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based buffer over-read when handling a malformed file in k344 in vbrquantize.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15018.json"
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.98"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.98.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.98.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.99"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.99.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.99.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.99.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.99.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "3.99.5"
}
]
}
]