CVE-2017-7605

Name of the Vulnerable Software and Affected Versions HE-AAC+ Codec (aka libaacplus) version 2.0.2

Description The issue is related to an assertion failure in the aacplusenc.c file, which could allow remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts. This can be achieved via a crafted audio file.

Recommendations For HE-AAC+ Codec (aka libaacplus) version 2.0.2, consider avoiding the use of crafted audio files until a patch is available. As a temporary workaround, restricting access to potentially malicious audio files may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.