CVE-2017-11551 (NVD)

2017-07-31

The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file.

Products Libid3tag
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch - None (likely due to unavailable code)
Links http://seclists.org/fulldisclosure/2017/Jul/85