A number of security issues in LAME were found by Debian developers via fuzzing and then patched in Debian. The discovered bugs and the respective patches can be found at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775959
However, the Ubuntu Trusty package for LAME is still vulnerable - the very first malformed sample from that bug report reliably causes a crash for me on amd64.
ProblemType: Bug
DistroRelease: elementary OS 0.3
Package: lame 3.99.5+repack1-3ubuntu1
ProcVersionSignature: Ubuntu 3.13.0-62.102-generic 3.13.11-ckt24
Uname: Linux 3.13.0-62-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.11
Architecture: amd64
CurrentDesktop: Pantheon
Date: Wed Aug 19 15:35:00 2015
InstallationDate: Installed on 2014-12-10 (251 days ago)
InstallationMedia: elementary OS 0.3 "Freya" - Daily amd64 (20141209)
SourcePackage: lame
UpgradeStatus: No upgrade log present (probably fresh install)
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https:/