152 matches found
CVE-2026-89266
A flaw was found in stbvorbis, an open-source library for Ogg Vorbis decoding. This vulnerability, a heap buffer overflow, occurs in the startdecoder function due to an integer truncation error when allocating memory for codebook multiplicands. A remote attacker could exploit this by crafting a...
EUVD-2026-76770
stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...
DEBIAN-CVE-2026-89266
stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...
CVE-2026-89266
stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...
Linux Distros Unpatched Vulnerability : CVE-2026-89266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attacker...
CVE-2026-89266
stb_vorbis (a single-file C library for Vorbis audio decoding) contains a heap buffer overflow in start_decoder() affecting versions through 1.22 . The root cause is a truncation of the codebook multiplicands allocation size from size_t to int, allowing a crafted Ogg Vorbis file with large entrie...
CVE-2026-89266
stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...
CVE-2026-89266 stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands
stbvorbis through 1.22 contains a heap buffer overflow in startdecoder where the codebook multiplicands allocation size is truncated from sizet to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes...
Linux Distros Unpatched Vulnerability : CVE-2026-5316
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setupfree of the file stbvorbis.c. The manipulation leads to...
Linux Distros Unpatched Vulnerability : CVE-2026-5317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in Nothings stb up to 1.22. This affects the function startdecoder of the file stbvorbis.c. The manipulation results in...
EUVD-2026-18114
A security flaw has been discovered in Nothings stb up to 1.22. This affects the function startdecoder of the file stbvorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The...
CVE-2026-5317
A security flaw has been discovered in Nothings stb up to 1.22. This affects the function startdecoder of the file stbvorbis.c. The manipulation results in out-of-bounds write. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The...
DEBIAN-CVE-2026-5316
A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setupfree of the file stbvorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor...
UBUNTU-CVE-2026-5316
A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setupfree of the file stbvorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor...
CVE-2026-5316 Nothings stb stb_vorbis.c setup_free allocation of resources
A vulnerability was identified in Nothings stb up to 1.22. The impacted element is the function setupfree of the file stbvorbis.c. The manipulation leads to allocation of resources. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor...
CVE-2023-45678
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in startdecoder because at maximum m-submaps can be 16 but submapfloor and submapresidue are declared as arrays of 15 elements. This issue may lead to code execution...
CVE-2023-45680
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that case the function returns early, the f-commentlist is set to NULL, but f-commentlistlength is not reset. Later in vorbisdeinit it tries to...
CVE-2023-45679
stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory allocation failure in startdecoder. In that case the function returns early, but some of the pointers in f-commentlist are left initialized and later setupfree is called on these...