Lucene search
K

6 matches found

Veracode
Veracode
added 2023/10/26 6:13 a.m.11 views

Out Of Bounds Read

stbvorbis is vulnerable to Out of bounds Read.The vulnerability is due to the processing of ogg vorbis files using the DECODE macro. This can be exploited by the attacker by crafting a file that triggers an out of bounds read when the var is negative thus resulting in leakage of internal memory...

7.1CVSS6.9AI score0.00022EPSS
Exploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2023/10/21 12:15 a.m.13 views

CVE-2023-45682

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in DECODE macro when var is negative. As it can be seen in the definition of DECODERAW a negative var is a valid value. This issue may be used to leak internal memory...

7.1CVSS6.7AI score0.00022EPSS
Exploits0References7
OSV
OSV
added 2023/10/21 12:15 a.m.0 views

UBUNTU-CVE-2023-45682

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in DECODE macro when var is negative. As it can be seen in the definition of DECODERAW a negative var is a valid value. This issue may be used to leak internal memory...

7.1CVSS5.8AI score0.00022EPSS
Exploits0References8
CNNVD
CNNVD
added 2023/10/21 12:0 a.m.2 views

stb_vorbis buffer error vulnerability

stbvorbis is an open source audio codec for decoding ogg vorbis files. A security vulnerability exists in stbvorbis, which stems from a well-designed file that may trigger an out-of-bounds read in the "DECODE" macro when "var" is negative...

7.1CVSS6.8AI score0.00022EPSS
Exploits0References6
Cvelist
Cvelist
added 2023/10/20 11:27 p.m.14 views

CVE-2023-45682 Wild address read in vorbis_decode_packet_rest in stb_vorbis

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in DECODE macro when var is negative. As it can be seen in the definition of DECODERAW a negative var is a valid value. This issue may be used to leak internal memory...

5.3CVSS6.9AI score0.00022EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2023/10/20 11:27 p.m.30 views

CVE-2023-45682

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in DECODE macro when var is negative. As it can be seen in the definition of DECODERAW a negative var is a valid value. This issue may be used to leak internal memory...

7.1CVSS6.7AI score0.00022EPSS
Exploits0
Rows per page
Query Builder