CVE-2017-9871 describes a stack-based buffer overflow in the III_i_stereo function of mpglib, specifically affecting LAME 3.99.5 and other products utilizing libmpgdecoder.a. This vulnerability carries a CVSS v3 score of 7.8 (High) due to its potential for a denial of service (application crash) and possibly other unspecified impacts, triggered by a crafted audio file requiring user interaction. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting a low current threat landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.99.5CPE matchmatch criteria | cpe:2.3:a:lame_project:lame:3.99.5:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.