Astra Linux - уязвимость в liblivemedia

Live555 version 1.08 does not handle Matroska and Ogg files properly. Sending two consecutive RTSP SETUP commands for the same track causes a Use-After-Free error and results in a crash of the daemon...

[SECURITY] Fedora 43 Update: SDL3_sound-3.0.0~20260117gitb00e4a3-1.fc43

SDLsound is a library that handles the decoding of several popular sound file formats, such as .WAV and .OGG. It is meant to make the programmer's sound playback tasks simpler. The programmer gives SDLsound a filename, or feeds it data directly from one of many sources, and then reads the decoded...

[SECURITY] Fedora 44 Update: SDL3_sound-3.0.0~20260117gitb00e4a3-1.fc44

SDLsound is a library that handles the decoding of several popular sound file formats, such as .WAV and .OGG. It is meant to make the programmer's sound playback tasks simpler. The programmer gives SDLsound a filename, or feeds it data directly from one of many sources, and then reads the decoded...

Linux Distros Unpatched Vulnerability : CVE-2017-15185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote...

CVE-2021-38382

Live555 through 1.08 does not handle Matroska and Ogg files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash...

Xiph Libvorbis Input Validation Error Vulnerability

Xiph Libvorbis is a tool from the Xiph Foundation that can be used to codec audio. The tool has a common music encoding format built in. An input validation error vulnerability exists in versions of Xiph Libvorbis prior to 1.3.6, which stems from lib/codebook.c not performing array bounds checkin...

Memory corruption vulnerability exists in QQ Video (CNVD-2017-34292)

QQ Video is a local player from Tencent that supports movie and music files in any format. A memory corruption vulnerability exists in the MPCVideoDec module of QQ Video Player when parsing ogg files of a specific format, which can be exploited by attackers to cause a denial of service attack...

Baidu Video has memory corruption vulnerability

Baidu Video is a new experience player newly launched by Baidu. It supports video and audio files in mainstream media formats and realizes local playback and online on-demand playback. A memory corruption vulnerability exists in the FFSplitter module of Baidu AV player when parsing special ogg...

RedHat Security Advisory RHSA-2009:1219

The remote host is missing updates announced in advisory RHSA-2009:1219. The libvorbis packages contain runtime libraries for use in programs that support Ogg Vorbis. Ogg Vorbis is a fully open, non-proprietary, patent-and royalty-free, general-purpose compressed audio format. An insufficient inp...

CDex buffer overflow

Buffer overflow on .ogg format parsing...