CVE-2017-8419

CVE-2017-8419 is a vulnerability affecting LAME versions through 3.99.5, stemming from its reliance on signed integers for WAV or AIFF header values. A crafted file can lead to denial of service via stack-based or heap-based buffer overflows, or other unspecified impacts. Rated High severity (CVSS 7.8), it requires user interaction (UI:R) and local access (AV:L) to exploit, potentially resulting in high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.