CVE-2016-5115 The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
MediumCVSS 5.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The avcodec_decode_audio4 function in libavcodec in libavformat 57.34.103, as used in MPlayer, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libavformat project libavformat | = 57.34.103 | No fix listed |
References
- [oss-security] 20160529 Re: CVE request: Mplayer/Mencoder read out-of-bounds parsing a mp3 file mailing-list third-party-advisory
- trac.mplayerhq.hu issue-tracking