EUVD-2023-49972

Malicious code in bioql PyPI...

SUSE CVE-2023-45682

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in DECODE macro when var is negative. As it can be seen in the definition of DECODERAW a negative var is a valid value. This issue may be used to leak internal memory...

stb_vorbis buffer error vulnerability

stbvorbis is an open source audio codec for decoding ogg vorbis files. A security vulnerability exists in stbvorbis, which stems from a well-designed file that may trigger an out-of-bounds read in the "DECODE" macro when "var" is negative...

CVE-2023-45682 Wild address read in vorbis_decode_packet_rest in stb_vorbis

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in DECODE macro when var is negative. As it can be seen in the definition of DECODERAW a negative var is a valid value. This issue may be used to leak internal memory...