stb_vorbis buffer error vulnerability

stbvorbis is an open source audio decoder for decoding ogg vorbis files. A security vulnerability exists in stbvorbis, which stems from a carefully crafted file that may trigger an out-of-bounds write in "f-vendorlen = char ;"...