Medium severity5.0NVD Advisory· Published Oct 9, 2017· Updated May 13, 2026
CVE-2017-15185
CVE-2017-15185
Description
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
Affected products
1- cpe:2.3:a:libmp3splt_project:libmp3splt:0.9.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- seclists.org/fulldisclosure/2017/Jul/82nvdMailing ListNot ApplicableThird Party Advisory
- anonscm.debian.org/cgit/users/ron/mp3splt.git/commit/nvdNot ApplicableThird Party Advisory
- lists.debian.org/debian-lts/2017/09/msg00115.htmlnvdThird Party Advisory
- www.exploit-db.com/exploits/42399/nvdNot ApplicableThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.