VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 8, 2014· Updated Apr 29, 2026

CVE-2014-0044

CVE-2014-0044

Description

The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix value, which triggers a NULL pointer dereference or a heap-based buffer over-read (aka "out-of-bounds array access").

Affected products

4
  • Light Speed Gaming/Mumble4 versions
    cpe:2.3:a:light_speed_gaming:mumble:1.2.3:rc1:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:light_speed_gaming:mumble:1.2.3:rc1:*:*:*:*:*:*
    • cpe:2.3:a:light_speed_gaming:mumble:1.2.3:rc2:*:*:*:*:*:*
    • cpe:2.3:a:light_speed_gaming:mumble:1.2.3:rc3:*:*:*:*:*:*
    • cpe:2.3:a:light_speed_gaming:mumble:1.2.4:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.