A integer overflow vulnerability in silk/NLSF_stabilize.c in libopus could enable an attacker using a specially crafted file to cause an application using libopus to crash during media file and data processing under specific conditions. Upstream patch: https://github.com/xiph/opus/commit/79e8f527b0344b0897a65be35e77f7885bd99409 References: https://git.xiph.org/?p=opus.git;a=commit;h=70a3d641b https://source.android.com/security/bulletin/2017-01-01.html
Created opus tracking bugs for this issue: Affects: fedora-all [bug 1413605] Affects: epel-all [bug 1413606]