CVE-2019-13219

CVE-2019-13219 concerns the stb project (stb_vorbis). The connected OpenSUSE/OSV/Debian entries indicate this CVE is addressed in updates for the stb package (e.g., openSUSE-SU-2025:0039-1) and related Debian/DLA entries. The concrete issue is described as an uninitialized memory problem in vorbi...

CVE-2019-13222

An out-of-bounds read of a global buffer in the drawline function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file...

Sean Barrett stb_vorbis buffer overflow vulnerability (CNVD-2019-41484)

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. A buffer overflow vulnerability exists in the 'startdecoder' function in Sean Barrett stbvorbis 2019-03-04 and earlier versions. The vulnerability stems from a networked system or product performing operations in...

CVE-2019-13222

CVE-2019-13222 affects the stb_vorbis draw_line() path in the stb library (stb_vorbis) with an out-of-range read caused by an unchecked NULL returned by get_window(). The public records in connected docs show this is addressed by vendor updates (e.g., openSUSE-SU-2025:0039-1 for stb, Debian DLA-3...

Unspecified vulnerability in Sean Barrett stb_vorbis (CNVD-2019-41487)

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. A security vulnerability exists in the 'startdecoder' function in Sean Barrett stbvorbis 2019-03-04 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service or disclose sensiti...

Sean Barrett stb_vorbis has an unspecified vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. A security vulnerability exists in the 'lookup1values' function in Sean Barrett stbvorbis 2019-03-04 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service with the help of...

CVE-2019-13220

CVE-2019-13220 affects the stb_vorbis component in the stb library (start_decoder context). The vulnerability is an out-of-range read in draw_line(), with the description indicating potential denial of service or disclosure of sensitive information when processing crafted Ogg Vorbis files. Public...

CVE-2019-13223

A reachable assertion in the lookup1values function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

Sean Barrett stb_vorbis code issue vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. Sean Barrett stbvorbis A code issue vulnerability exists in the 'getwindow' function in versions 2019-03-04 and earlier. The vulnerability stems from an improperly designed or implemented code development process...

CVE-2019-13218

Division by zero in the predictpoint function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file...

Sean Barrett stb_vorbis Buffer Overflow Vulnerability

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. A buffer overflow vulnerability exists in the 'computecodewords' function in Sean Barrett stbvorbis 2019-03-04 and earlier versions. The vulnerability stems from a networked system or product performing operations...

PT-2019-13188 · Stb · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: A stack buffer overflow in the compute codewords function allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. Recommendations: For...

PT-2019-13186 · No Company · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: A NULL pointer dereference in the get window function allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. Recommendations: For versions through 2019-03-04,...

PT-2019-13189 · Nothinq · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: The issue is related to an out-of-bounds read of a global buffer in the draw line function. This can be exploited by opening a crafted Ogg Vorbis file, allowing an attacker to cause a denial...

PT-2019-13187 · Nothinq · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: The issue is related to the use of uninitialized stack variables in the start decoder function, which can be exploited by opening a crafted Ogg Vorbis file. This can lead to a denial of...

PT-2019-13185 · No Company · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: The issue allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file, due to a division by zero in the predict point function. Recommendations: For versions through...

PT-2019-13190 · Stb · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: A reachable assertion in the lookup1 values function allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. Recommendations: For versions through 2019-03-04,...

PT-2019-13184 · No Company · Stb Vorbis

Name of the Vulnerable Software and Affected Versions: stb vorbis versions through 2019-03-04 Description: A heap buffer overflow in the start decoder function allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. Recommendations: For stb...

CVE-2019-13221

CVE-2019-13221 affects the stb_vorbis component (stb) in the compute_codewords() path. Multiple connected advisories (e.g., openSUSE-SU-2025:0039-1 and OSV-OPENSUSE-SU-2025:0039-1) describe a stack/buffer overflow in that area and list it among the fixes for stb via updated libstb packages. The v...

CVE-2019-13217

A heap buffer overflow in the startdecoder function in stbvorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file...