| Name | CVE-2018-7263 |
| Description | The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
Notes
Seems like a duplicate of CVE-2017-11552 relates to the issue raised in
https://bugs.debian.org/870608
https://bugzilla.suse.com/show_bug.cgi?id=1081784
MITRE stated, that "[...] However, if there are two different code
paths by which libmad is used incorrectly, and both code paths result
in "double free or corruption" errors, then we would represent this
with two CVEs."