CVE-2018-7263

Name of the Vulnerable Software and Affected Versions libmad versions prior to 0.15.1b

Description The issue is related to the mad decoder run() function in decoder.c, which allows remote attackers to cause a denial of service or possibly have other unspecified impacts via a crafted file. This could result in a SIGABRT due to double free or corruption.

Recommendations For versions prior to 0.15.1b, consider disabling the mad decoder run() function as a temporary workaround until a patch is available. Restrict access to crafted files to minimize the risk of exploitation.