DLA-1380-1 libmad - security update
Published
Unknown
Product
debian/libmad vulnerabilities
5 published CVES affecting debian/libmad, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unscored
- 2
- CISA KEV
- 0
Latest debian/libmad CVEs
Newest publication first
-
-
DSA-4192-1 libmad - security update
PublishedUnknown -
MediumCVSS 5.5 EPSS 2.2%
The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file.
-
HighCVSS 7.8 EPSS 2.5%
The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted audio file.
-
MediumCVSS 4.7 EPSS 2.1%
The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted audio file.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.