1105 matches found
CVE-2025-70310: Heap-based Buffer Overflow
A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...
CVE-2025-70310
The GPAC multimedia framework (specifically v2.4.0 ) contains a heap overflow vulnerability in the vorbis_to_intern() function. The root cause is a failure to correctly validate the length and size of input data, which can be exploited by an attacker using a crafted .ogg file to trigger a Denial ...
CVE-2025-70310
A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...
CVE-2025-70298
Removed by vendor...
CVE-2025-70310
A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...
MiracleLinux 3 : libvorbis-1.1.2-3.6.0.1.AXS3 (AXSA:2012-272:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-272:01 advisory. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrat...
MiracleLinux 3 : libvorbis-1.1.2-3.3.1AXS3 (AXSA:2009-385:01)
The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-385:01 advisory. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and...
CVE-2019-18794
The BASS Audio Library 2.4.14 under Windows is prone to a BASSStreamCreateFile Use after Free vulnerability via a crafted .ogg file. An attacker can exploit this to gain access to sensitive information that may aid in further attacks. A failure in exploitation leads to denial of service...
CVE-2023-45678
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in startdecoder because at maximum m-submaps can be 16 but submapfloor and submapresidue are declared as arrays of 15 elements. This issue may lead to code execution...
Unity Linux 20.1070e Security Update: libsndfile (UTSA-2025-991103)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991103 advisory. libsndfile through 1.2.2 has an oggvorbis.c vorbisanalysiswrote out-of-bounds read. Tenable has extracted the preceding description block directly from the Unity Lin...
TencentOS Server 4: vorbis-tools (TSSA-2025:0085)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0085 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
EUVD-2019-4733
Malware in sbrugna...
EUVD-2019-4735
Malware in sbrugna...
EUVD-2019-4732
Malware in sbrugna...
EUVD-2019-5632
Malware in sbrugna...
EUVD-2007-4050
Malware in sbrugna...
EUVD-2007-4049
Malware in sbrugna...
EUVD-2019-5633
Malware in sbrugna...