user/libmad: CVE-2018-7263: SIGABRT via crafted file

Bugzilla ID	122
Alias(es)	CVE-2018-7263
Reporter	Max Rees (sroracle)
Assignee	Max Rees (sroracle)
Reported	2019-07-29 03:24:15 -0500
Modified	2020-09-17 01:12:12 -0500
Status	RESOLVED FIXED
Version	1.0-BETA3
Hardware	Adélie Linux / All
Importance	--- / minor
Package(s)	user/libmad
URL	https://nvd.nist.gov/vuln/detail/CVE-2018-7263

Description

The mad_decoder_run() function in decoder.c in Underbit libmad through
0.15.1b allows remote attackers to cause a denial of service (SIGABRT
because of double free or corruption) or possibly have unspecified
other impact via a crafted file. NOTE: this may overlap
CVE-2017-11552.