CVE-2023-47212

CVE-2023-47212 affects stb_vorbis.c v1.22. A heap-based buffer overflow via the comment handling in stb_vorbis can occur with a crafted .ogg file. The root cause is an integer overflow in sizeof(char*) * (f->comment_list_length) in start_decoder, leading to under-allocation of memory and an ou...

CVE-2023-47212

A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-47212

A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

stb stb_vorbis.c comment heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1846 stb stbvorbis.c comment heap-based buffer overflow vulnerability May 1, 2024 CVE Number CVE-2023-47212 SUMMARY A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c v1.22. A specially crafted .ogg file can lead to...

stb_vorbis 缓冲区错误漏洞

stbvorbis is an open source audio decoder for decoding ogg vorbis files. A buffer error vulnerability exists in stb vorbis.c version v1.22, which stems from the presence of a heap-based buffer overflow vulnerability that could lead to out-of-bounds writes...

Fedora 40 : stb / usd (2023-58af3a2eca)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-58af3a2eca advisory. Security fix for CVE-2023-45661 CVE-2023-45662 CVE-2023-45663 CVE-2023-45664 CVE-2023-45666 CVE-2023-45667 CVE-2023-45675 Tenable has extracted the...

Fedora 40 : oggvideotools (2023-9f6281eaf7)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-9f6281eaf7 advisory. Automatic update for oggvideotools-0.9.1-15.fc40. Changelog Sun Aug 27 2023 Zbigniew Jdrzejewski-Szmek - 0.9.1-15 - Add patch for CVE-2020-21724 rhbz2234728...

FreeBSD : sdl2_sound -- multiple vulnerabilities (304d92c3-00c5-11ef-bd52-080027bff743)

"The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 304d92c3-00c5-11ef-bd52-080027bff743 advisory. - stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted...

The vulnerability of the Vorbis-tools package, related to the ability to write beyond the buffer boundaries in memory, allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Vorbis-tools package lies in its ability to write beyond the buffer boundaries in memory during the conversion of WAV files into OGG files. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

ROS-20240404-20

A vulnerability in the Vorbis-tools package is related to the conversion of wav files to ogg files. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Fedora: Security Advisory for jorbis (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: jorbis-0.0.17-34.fc40

JOrbis is a pure Java Ogg Vorbis decoder...

Fedora: Security Advisory for vorbis-tools (FEDORA-2024-5f8da7c1f1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: vorbis-tools-1.4.2-9.fc38

Ogg Vorbis is a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed audio format for audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. The vorbis package contains an encoder, a decoder, a playback tool, and a comment editor...

Fedora: Security Advisory (FEDORA-2024-faff3dd9d6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Denial Of Service (DoS)

vorbis-tools is vulnerable to Denial Of Service DoS. The vulnerability exists due to the buffer overflow in the library, which allows an attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...

PT-2023-9143 · Unknown +2 · Stb Vorbis.C +2

Name of the Vulnerable Software and Affected Versions: stb vorbis.c version 1.22 Description: A heap-based buffer overflow vulnerability exists in the comment functionality of stb vorbis.c. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file ...

Fedora 39 : stb / usd (2023-def2f95af4)

The remote Fedora 39 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-def2f95af4 advisory. Security fix for CVE-2023-45661 CVE-2023-45662 CVE-2023-45663 CVE-2023-45664 CVE-2023-45666 CVE-2023-45667 CVE-2023-45675 CVE-2023-43281 ---- A new...

SUSE SLES12 Security Update : vorbis-tools (SUSE-SU-2023:4218-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4218-1 advisory. - CVE-2023-43361: Fixed a buffer overflow vulnerability during the conversion of wav files to ogg files. bsc1215942 Tenable has extracted th...

Out Of Bounds Write

stbvorbis is vulnerable to Out Of Bounds Write. The vulnerability is due to the manipulation of the len variable when processing ogg vorbis files with the f-vendorlen = char'\0';' function. The attacker can exploit this issue by crafting a malicious file that causes the len read in startdecoder t...