Sean Barrett stb_vorbis buffer overflow vulnerability (CNVD-2019-41484)

Sean Barrett stbvorbis is an open source audio codec for decoding ogg vorbis files. A buffer overflow vulnerability exists in the 'startdecoder' function in Sean Barrett stbvorbis 2019-03-04 and earlier versions. The vulnerability stems from a networked system or product performing operations in...

CVE-2019-13217

CVE-2019-13217 affects stb_vorbis (part of the stb library) with a heap buffer overflow in start_decoder. Public advisories confirm impact as a potential denial of service or arbitrary code execution when loading crafted Ogg Vorbis files. Patches are issued across multiple distros: openSUSE/SUSE ...