Lucene search
PRIOn knowledge basePRION:CVE-2023-45678HistoryOct 21, 2023 - 12:15 a.m.
Code injection
2023-10-2100:15:00
PRIOn knowledge base
www.prio-n.com
4
stb_vorbis
library
code injection
buffer overflow
start_decoder
nvd
0.001 Low
EPSS
Percentile
28.7%
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in start_decoder because at maximum m->submaps can be 16 but submap_floor and submap_residue are declared as arrays of 15 elements. This issue may lead to code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| stb_vorbis.c | eq | 1.22 |
Related
cvelist
cvelist
CVE-2023-45678 Off-by-one heap buffer write in start_decoder in stb_vorbis
2023-10-20 23:26:51
ubuntucve
ubuntucve
CVE-2023-45678
2023-10-21 00:00:00
veracode
veracode
Out-of-bounds Write
2023-10-26 09:33:44
nvd
nvd
CVE-2023-45678
2023-10-21 00:15:09
cve
cve
CVE-2023-45678
2023-10-21 00:15:09
debiancve
debiancve
CVE-2023-45678
2023-10-21 00:15:09