CVE-2017-15019

PoC —

CVSS 3.0

7.8 high

EPSS

1%p62

Published

Oct 5, 2017 (Oct 5, 2017)

Modified

Jun 17, 2026

Description

LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame/mpglib_interface.c via a malformed mpg file, because of an incorrect calloc call.

Vendors: lame project
Products: lame
Weakness: CWE-476
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.