Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/21 11:17 p.m.4 views

MGASA-2024-0186 Updated stb packages fix security vulnerabilities

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in startdecoder. The root cause is a potential integer overflow in sizeofchar f-commentlistlength which may make setupmalloc allocate less memory...

9.8CVSS7.2AI score0.0141EPSS
SaveExploits1References3
Rows per page
Query Builder