CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in start_decoder
. The root cause is a potential integer overflow in sizeof(char*) * (f->comment_list_length)
which may make setup_malloc
allocate less memory than required. Since there is another integer overflow an attacker may overflow it too to force setup_malloc
to return 0 and make the exploit more reliable. This issue may lead to code execution.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | edge-community | noarch | stb | = 0_git20231012-r0 | UNKNOWN |
Alpine | 3.20-community | noarch | stb | = 0_git20231012-r0 | UNKNOWN |