Lucene search
PRIOn knowledge basePRION:CVE-2023-45680HistoryOct 21, 2023 - 12:15 a.m.
Design/Logic Flaw
2023-10-2100:15:00
PRIOn knowledge base
www.prio-n.com
1
stb_vorbis
mit license
start_decoder
memory allocation
denial of service
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in start_decoder. In that case the function returns early, the f->comment_list is set to NULL, but f->comment_list_length is not reset. Later in vorbis_deinit it tries to dereference the NULL pointer. This issue may lead to denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| stb_vorbis.c | eq | 1.22 |
Related
debiancve
debiancve
CVE-2023-45680
2023-10-21 00:15:09
ubuntucve
ubuntucve
CVE-2023-45680
2023-10-21 00:00:00
nvd
nvd
CVE-2023-45680
2023-10-21 00:15:09
cve
cve
CVE-2023-45680
2023-10-21 00:15:09
cvelist
cvelist
CVE-2023-45680 Null pointer dereference in vorbis_deinit in stb_vorbis
2023-10-20 23:26:54
veracode
veracode
Denial Of Service (DoS)
2023-10-26 06:00:49
freebsd
freebsd
sdl2_sound -- multiple vulnerabilities
2023-10-20 00:00:00
nessus
nessus