CVE-2021-0967

In vorbisbookdecodevset of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-1...

Xiph Libvorbis Input Validation Error Vulnerability

Xiph Libvorbis is a tool from the Xiph Foundation that can be used to codec audio. The tool has a common music encoding format built in. An input validation error vulnerability exists in versions of Xiph Libvorbis prior to 1.3.6, which stems from lib/codebook.c not performing array bounds checkin...