2 matches found
SUSE CVE-2023-45680
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that case the function returns early, the f-commentlist is set to NULL, but f-commentlistlength is not reset. Later in vorbisdeinit it tries to...
5.3CVSS6.8AI score0.00535EPSS
SaveExploits0References4
DEBIAN-CVE-2023-45680
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that case the function returns early, the f-commentlist is set to NULL, but f-commentlistlength is not reset. Later in vorbisdeinit it tries to...
5.5CVSS5.5AI score0.00535EPSS
SaveExploits0References1
20