Logo
vulnerabilityCVE-2017-11548
Name
CVE-2017-11548
Source
NVD ( link)Debian ( link)
Description
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libao
Patched

Vulnerability Ratings#


5.5
CVSSv31
4.3
CVSSv2

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.2.0
Exploitable
buildroot
master
1.2.2
Not Affected
openwrt
openwrt-25.12
1.2.0-r2
Patched
yocto
kirkstone
1.2.0
Not Affected
yocto
master
1.2.0
Not Affected
yocto
scarthgap
1.2.0
Not Affected

Resolved with patches#


libao (openwrt:master)

#
Title
Author
Resolve
1
Check memory allocations for success
Ron <ron@debian.org>
CVE-2017-11548

libao (openwrt:openwrt-25.12)

#
Title
Author
Resolve
1
Check memory allocations for success
Ron <ron@debian.org>
CVE-2017-11548