1002 matches found
CVE-2023-45676
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendori = get8packetf;. The root cause is an integer overflow in setupmalloc. A sufficiently large value in the variable sz overflows with sz+7 in and the negative...
CVE-2023-45675 0 byte write heap buffer overflow in start_decoder in stb_vorbis
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if the len read in startdecoder is -1 and len + 1 becomes 0 when passed to setupmalloc. The setupmalloc behaves...
CVE-2023-45675
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if the len read in startdecoder is -1 and len + 1 becomes 0 when passed to setupmalloc. The setupmalloc behaves...
CVE-2023-45675
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendorlen = char'\0';. The root cause is that if the len read in startdecoder is -1 and len + 1 becomes 0 when passed to setupmalloc. The setupmalloc behaves...
PT-2023-29643
Name of the Vulnerable Software and Affected Versions stb vorbis affected versions not specified Description The issue is related to the processing of ogg vorbis files. A crafted file can trigger an out of bounds write in f-vendori = get8 packetf;. This is caused by an integer overflow in setup...
PT-2023-29647 · Unknown +1 · Stb Vorbis +1
Name of the Vulnerable Software and Affected Versions: stb vorbis affected versions not specified Description: The issue is related to a memory allocation failure in the start decoder function when processing a crafted ogg vorbis file. This failure causes the function to return early, setting...
PT-2023-29646 · Unknown +2 · Stb Vorbis +2
Name of the Vulnerable Software and Affected Versions: stb vorbis affected versions not specified Description: The issue is related to the processing of ogg vorbis files. A crafted file can cause a memory allocation failure in the start decoder function, leading to some pointers in f-comment list...
PT-2023-29645
Name of the Vulnerable Software and Affected Versions stb vorbis affected versions not specified Description The issue is related to the processing of ogg vorbis files. A crafted file can trigger an out of buffer write in the start decoder function. This occurs because the maximum value of...
PT-2023-29644
Name of the Vulnerable Software and Affected Versions stb vorbis affected versions not specified Description The issue is related to the processing of ogg vorbis files. A crafted file can trigger an out of bounds write in f-vendorlen = char'0';. This occurs when len read in start decoder is a...
CVE-2023-43361
A buffer overflow vulnerability was found in vorbis-tools. This flaw allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of WAV files to OGG files. Mitigation Mitigation for this issue is either not available or the currently available options do...
SUSE CVE-2023-43361
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
AZL-31037 CVE-2023-43361 affecting package vorbis-tools 1.4.2-6
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
DEBIAN-CVE-2023-43361
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
AZL-37055 CVE-2023-43361 affecting package vorbis-tools 1.4.2-6
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
CVE-2023-43361
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
UBUNTU-CVE-2023-43361
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files...
PT-2023-8921 · Unknown +7 · Vorbis-Tools +7
Name of the Vulnerable Software and Affected Versions: Vorbis-tools version 1.4.2 Description: The issue is related to a Buffer Overflow vulnerability that allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files. This occurs...
Vorbis-tools Buffer Error Vulnerability
vorbis-tools is an open source command line tool from the Xiph.Org Foundation for creating and playing Ogg Vorbis files. A buffer error vulnerability exists in Vorbis-tools version v.1.4.2, which stems from the presence of a buffer overflow vulnerability. An attacker could use this vulnerability ...