Description
The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denial of service (SIGABRT because of double free or corruption) or possibly have unspecified other impact via a crafted file. NOTE: this may overlap CVE-2017-11552.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | mpg321 | No fix yet | — |
| Ubuntu 26.04 LTS | mpg321 | No fix yet | — |
| Ubuntu 25.10 | mpg321 | No fix yet | — |
| Ubuntu 24.04 LTS | mpg321 | No fix yet | — |
| Ubuntu 22.04 LTS | mpg321 | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | mpg321 | No fix yet | — |
| Ubuntu 18.04 LTS | mpg321 | No fix yet | — |
| Ubuntu 16.04 LTS | mpg321 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | SDL +1 | 1.2.15-37.el8 | RHSA-2020:1631 |
| RHEL 8 | SDL2 +2 | 2.0.10-2.el8 | RHSA-2020:1631 |
| RHEL 8 | gstreamer1 +1 | 1.16.1-2.el8 | RHSA-2020:1631 |
| RHEL 8 | gstreamer1-plugins-base +6 | 1.16.1-1.el8 | RHSA-2020:1631 |
| RHEL 8 | libmad +1 | 0.15.1b-25.el8 | RHSA-2020:1631 |
| RHEL 8 | orc +2 | 0.4.28-3.el8 | RHSA-2020:1631 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | SDL2 +2 | 2.0.10-2.el8 | ALSA-2020:1631 |
| AlmaLinux 8 | gstreamer1 +1 | 1.16.1-2.el8 | ALSA-2020:1631 |
| AlmaLinux 8 | gstreamer1-plugins-bad-free +2 | 1.16.1-1.el8 | ALSA-2020:1631 |
| AlmaLinux 8 | libmad +1 | 0.15.1b-25.el8 | ALSA-2020:1631 |
| AlmaLinux 8 | orc +2 | 0.4.28-3.el8 | ALSA-2020:1631 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | SDL2 | 2.0.10-2.el8 | RLSA-2020:1631 |
| Rocky Linux 8 | gstreamer1 | 1.16.1-2.el8 | RLSA-2020:1631 |
| Rocky Linux 8 | gstreamer1-plugins-bad-free +1 | 1.16.1-1.el8 | RLSA-2020:1631 |
| Rocky Linux 8 | libmad | 0.15.1b-25.el8 | RLSA-2020:1631 |
| Rocky Linux 8 | orc | 0.4.28-3.el8 | RLSA-2020:1631 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | libmad | 0.15.1b-r9 | — |
| Alpine v3.23 | libmad | 0.15.1b-r9 | — |
| Alpine v3.22 | libmad | 0.15.1b-r9 | — |
| Alpine v3.21 | libmad | 0.15.1b-r9 | — |
| Alpine v3.20 | libmad | 0.15.1b-r9 | — |
Show 9 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | libmad | 0.15.1b-r9 | — |
| Alpine v3.18 | libmad | 0.15.1b-r9 | — |
| Alpine v3.17 | libmad | 0.15.1b-r9 | — |
| Alpine v3.16 | libmad | 0.15.1b-r9 | — |
| Alpine v3.15 | libmad | 0.15.1b-r9 | — |
| Alpine v3.14 | libmad | 0.15.1b-r9 | — |
| Alpine v3.13 | libmad | 0.15.1b-r9 | — |
| Alpine v3.12 | libmad | 0.15.1b-r9 | — |
| Alpine v3.11 | libmad | 0.15.1b-r9 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | SDL +1 | 1.2.15-37.el8 | ELSA-2020-1631 |
| Oracle Linux 8 | SDL2 +2 | 2.0.10-2.el8 | ELSA-2020-1631 |
| Oracle Linux 8 | gstreamer1 +1 | 1.16.1-2.el8 | ELSA-2020-1631 |
| Oracle Linux 8 | gstreamer1-plugins-base +6 | 1.16.1-1.el8 | ELSA-2020-1631 |
| Oracle Linux 8 | libmad +1 | 0.15.1b-25.el8 | ELSA-2020-1631 |
| Oracle Linux 8 | orc +2 | 0.4.28-3.el8 | ELSA-2020-1631 |
Advisories 4
- ALSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2020:1631 Red Hat Security Advisory: GStreamer, libmad, and SDL security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 27, 2026
- RLSA-2020:1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update Rocky Linux Security Advisories · Feb 5, 2026
- ELSA-2020-1631 Low: GStreamer, libmad, and SDL security, bug fix, and enhancement update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · May 5, 2020