The fill_buffer_resample function in libmp3lame/util.c in LAME 3.99.5 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted wav file.
Following CVE is assigned for this issue: https://nvd.nist.gov/vuln/detail/CVE-2017-9410
Originally reported here http://seclists.org/fulldisclosure/2017/Jul/63 as the first issue.
PoC in http://seclists.org/fulldisclosure/2017/Jul/att-63/poc_zip.bin
I suspect it is a duplicate of: https://blogs.gentoo.org/ago/2017/06/17/lame-heap-based-buffer-overflow-in-fill_buffer_resample-util-c/
Thanks, we get addressed in version 3.100.