Medium severity5.5NVD Advisory· Published Apr 25, 2018· Updated Jun 17, 2026
CVE-2017-6888
CVE-2017-6888
Description
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords3 versionspkg:rpm/opensuse/flac&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/flac&distro=openSUSE%20Tumbleweedpkg:rpm/suse/flac&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015
< 1.3.2-lp150.2.3.1+ 2 more
- (no CPE)range: < 1.3.2-lp150.2.3.1
- (no CPE)range: < 1.3.3-1.9
- (no CPE)range: < 1.3.2-3.3.20
- FLAC/FLACv5Range: 1.3.2
Patches
Vulnerability mechanics
References
6- lists.debian.org/debian-lts-announce/2021/01/msg00001.htmlnvdMailing ListThird Party Advisory
- secuniaresearch.flexerasoftware.com/advisories/82639/nvdThird Party Advisory
- secuniaresearch.flexerasoftware.com/secunia_research/2017-7/nvdThird Party Advisory
- git.xiph.orgnvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33W6XZAAEJYRGU3XYHRO7XSYEA7YACUB/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNZYTAU5UWBVXVJ4VHDWPR66ZVDLQZRE/nvd
News mentions
0No linked articles in our index yet.