CVE-2023-45681

🗓️ 20 Oct 2023 23:26:56Reported by GitHub_MType

stb_vorbis library memory write vulnerability in start_decoder function may lead to code execution

Reporter	Title	Published	Views	Family All 50
FreeBSD	sdl2_sound -- multiple vulnerabilities	20 Oct 202300:00	–	freebsd
AlpineLinux	CVE-2023-45681	20 Oct 202323:26	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в libstb	3 May 202623:59	–	astralinux
CNNVD	stb_vorbis Input Validation Error Vulnerability	21 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-45681 Out of bounds heap buffer write in stb_vorbis	20 Oct 202323:26	–	cvelist
Debian CVE	CVE-2023-45681	20 Oct 202323:26	–	debiancve
EUVD	EUVD-2023-49971	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 39 Update: stb-0^20240213gitae721c5-6.fc39	11 May 202402:22	–	fedora
Fedora	[SECURITY] Fedora 38 Update: stb-0^20240213gitae721c5-5.fc38	11 May 202401:36	–	fedora
Fedora	[SECURITY] Fedora 41 Update: libxmp-4.6.1-2.fc41	11 Jan 202501:43	–	fedora

NVD

Vulners

Vulnrichment

Node

nothings stb_vorbis.cMatch1.22

[
  {
    "vendor": "nothings",
    "product": "stb",
    "versions": [
      {
        "version": "<= 1.22",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2WRORYQ2Z2XXHPX36JHBUSDVY6IOMW2N/
github	www.github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2MHQQXX27ACLLYUQHWSL3DVCOGUK5ZA4/
securitylab	www.securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/LBIPXOBWUHPAH4QHMVP2AWWAPDDZDQ66/

21 Nov 2024 08:27Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.3 - 7.8

EPSS0.00049

SSVC