stb vorbis project stb vorbis vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

Sean Barrett stb_vorbis version 1.12 and previous versions contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must ope...

Stb Vorbis Project Stb Vorbis

7.8

CVSSv3

A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

7.8

CVSSv3

A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

7.1

CVSSv3

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

7.1

CVSSv3

An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

5.5

CVSSv3

Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

5.5

CVSSv3

A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

5.5

CVSSv3

A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an malicious user to cause a denial of service by opening a crafted Ogg Vorbis file.

Stb Vorbis Project Stb Vorbis Debian Debian Linux 10.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook