CVE-2017-7603

Name of the Vulnerable Software and Affected Versions HE-AAC+ Codec (aka libaacplus) version 2.0.2

Description The issue is related to a signed integer overflow in the au channel.h file, which could allow remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts. This can be achieved via a crafted audio file.

Recommendations For HE-AAC+ Codec (aka libaacplus) version 2.0.2, consider updating to a newer version that addresses the signed integer overflow issue in the au channel.h file. As a temporary workaround, restrict the processing of crafted audio files to minimize the risk of exploitation.