High severity7.8NVD Advisory· Published Apr 9, 2017· Updated May 13, 2026
CVE-2017-7603
CVE-2017-7603
Description
au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file.
Affected products
1- cpe:2.3:a:libaacplus_project:libaacplus:2.0.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- blogs.gentoo.org/ago/2017/04/01/libaacplus-signed-integer-overflow-left-shift-and-assertion-failure/nvdExploitThird Party Advisory
- security.gentoo.org/glsa/202209-13nvdThird Party Advisory
News mentions
0No linked articles in our index yet.