CVE-2017-14633

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0forward in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbisanalysis...

CVE-2017-14632

Xiph.Org libvorbis 1.3.5 is vulnerable to CVE-2017-14632: remote code execution via freeing uninitialized memory in vorbis_analysis_headerout() when vi->channels

CVE-2017-14633

CVE-2017-14633 : In Xiph.Org libvorbis 1.3.5, there is an out-of-bounds array read in mapping0_forward() of mapping0.c that may cause a denial of service when processing a crafted audio file with vorbis_analysis(). The issue is fixed upstream in libvorbis 1.3.6. Public advisories across distribut...

CVE-2017-14632

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...

PT-2017-13595 · Xiph.Org +3 · Libvorbis +3

Name of the Vulnerable Software and Affected Versions: libvorbis version 1.3.5 Description: An out-of-bounds array read issue exists in the function mapping0 forward in mapping0.c. This may lead to a denial of service DoS when operating on a crafted audio file with vorbis analysis. Recommendation...

CVE-2017-14632

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...

UBUNTU-CVE-2017-14632

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbisanalysisheaderout in info.c when vi-channels=0, a similar issue to Mozilla bug 550184...

libvorbis -- two vulnerabilities

Two vulnerabilities were fixed in the upstream repository: The barknoisehybridmp function allows remote attackers to cause a denial of service out-of-bounds access and application crash or possibly have unspecified other impact via a crafted file. mapping0forward does not validate the number of...

CVE-2017-14633

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0forward in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbisanalysis...

UBUNTU-CVE-2017-14633

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0forward in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbisanalysis...

Remote code execution

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

CVE-2017-0764

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

CVE-2017-0764

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

CVE-2017-0764

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

CVE-2017-0764

CVE-2017-0764 is a remote code execution in Android’s media framework (libvorbis). Affected Android versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. The root cause is a flaw in media processing by libvorbis that could be exploited via a crafted file. CVSS3/ATT&CK context from th...

Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2017-31366)

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA for short. media framework libvorbis is one of the audio encoding/decoding libraries. A remote code execution vulnerability exists in Media frameworklibvorbis in Android. A...

CVE-2017-0764

A remote code execution vulnerability in the Android media framework libvorbis. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015...

Xiph.Org libvorbis 'orbis_block_clear' function denial of service vulnerability

Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'orbisblockclear' function in the lib/block.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of service nu...

Xiph.Org libvorbis lib/block.c file denial of service vulnerability

Xiph.Org libvorbis is an open source audio music encoding and decoding function library . A security vulnerability exists in the 'vorbisanalysiswrote' function in the lib/block.c file in Xiph.Org libvorbis version 1.3.5. A remote attacker can exploit this vulnerability to cause a denial of servic...

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control. The vorbisanalysiswrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service OOM via a crafted wav file. Remediation There is no fixed version for vorbis...