CVE-2026-125228 FFmpeg before 8.1.3 and 9.x before 9.0.2 Out-of-Bounds Read in Vorbis Encoder

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in putvector in libavcodec/vorbisenc.c when NaN samples leave the codebook entry at -1. Attackers can supply audio with NaN float samples to the native Vorbis encoder, causing heap reads before arrays that crash...

CVE-2026-125228 FFmpeg before 8.1.3 and 9.x before 9.0.2 Out-of-Bounds Read in Vorbis Encoder

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in putvector in libavcodec/vorbisenc.c when NaN samples leave the codebook entry at -1. Attackers can supply audio with NaN float samples to the native Vorbis encoder, causing heap reads before arrays that crash...

CVE-2026-125224 FFmpeg through 9.0.2 Vorbis Parser CPU Exhaustion via Invalid Extradata

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbisparser.c that re-parses invalid extradata for every packet when validextradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust CP...

CVE-2026-125224

FFmpeg versions through 9.0.2 are susceptible to a denial of service vulnerability in the libavcodec/vorbis_parser.c component. The root cause is that the parser re-parses invalid extradata for every packet whenever valid_extradata remains false. An attacker can exploit this by providing crafted ...

CVE-2026-125228: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in put_vector() in…

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in putvector in libavcodec/vorbisenc.c when NaN samples leave the codebook entry at -1. Attackers can supply audio with NaN float samples to the native Vorbis encoder, causing heap reads before arrays that crash...

PT-2026-141052

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis parser.c that re-parses invalid extradata for every packet when valid extradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust...

CVE-2026-125224: FFmpeg: FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis_parser.c that re-parses invalid…

FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbisparser.c that re-parses invalid extradata for every packet when validextradata remains false. Attackers can supply crafted Ogg or Matroska Vorbis streams with large invalid extradata and many packets to exhaust CP...

CLEANSTART-2024-WD65317 Buffer Overflow vulnerability in Vorbis-tools v

Security vulnerability affects the vorbis-tools package. Buffer Overflow vulnerability in Vorbis-tools v...

CLEANSTART-2025-NN10146 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files

Security vulnerability affects the stb package. stbvorbis is a single file MIT licensed library for processing ogg vorbis files...

Astra Linux – vulnerability in vorbis-tools

A buffer underflow vulnerability has been identified in the ogg123 utility within the vorbis-tools 1.4.3 package, specifically in the remotethread function located in remote.c. This vulnerability arises during the remote control functionality when processing malformed input, resulting in a stack...

Astra Linux – Vulnerability in libstb

There is a heap-based buffer overflow vulnerability in the comment functionality of stbvorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to exploit this vulnerability...

Astra Linux – vulnerability in libstb

stbvorbis is a single-file MIT-licensed library for processing OGG Vorbis files. A specially crafted file may result in an out-of-bounds write via f-vendorlen = char'\0';. The root cause is that if len read from startdecoder is -1, then len + 1 becomes 0 when passed to setupmalloc. setupmalloc...

Astra Linux – vulnerability in libstb

stbvorbis is a single-file MIT-licensed library for processing OGG Vorbis files. A specially crafted file may cause an out-of-bounds write in startdecoder, as the maximum value for m-submaps is 16; however, submapfloor and submapresidue are declared as arrays containing 15 elements. This issue...

Astra Linux – vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

Rocky Linux 8 [CIQ] Security Update: vorbis-tools / vorbis-tools-debuginfo / vorbis-tools-debugsource (crlsa-2024_3095)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243095 advisory. vorbis-tools: Buffer Overflow vulnerability CVE-2023-43361 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

SUSE CVE-2026-89266

stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...

Astra Linux – Vulnerability in libstb

STBVorbis is a single-file library licensed under MIT that processes OGG Vorbis files. A maliciously crafted file may cause memory writes to exceed the allocated heap buffer in startdecoder. The root cause of this issue is a potential integer overflow in sizeofchar f-commentlistlength, which may...

CVE-2026-89266

A flaw was found in stbvorbis, an open-source library for Ogg Vorbis decoding. This vulnerability, a heap buffer overflow, occurs in the startdecoder function due to an integer truncation error when allocating memory for codebook multiplicands. A remote attacker could exploit this by crafting a...

EUVD-2026-76770

stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...

DEBIAN-CVE-2026-89266

stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...