tremor:decode_fuzzer: Heap-buffer-overflow in vorbis_book_decodev_add

Detailed Report: https://oss-fuzz.com/testcase?key=5674180009000960 Project: tremor Fuzzing Engine: honggfuzz Fuzz Target: decodefuzzer Job Type: honggfuzzasantremor Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x611000000500 Crash State: vorbisbookdecodevadd 01invers...

libtremor -- multiple vulnerabilities

The RedHat Project reports: Will Drewry of the Google Security Team reported multiple issues in OGG Vorbis and Tremor libraries, that could cause application using those libraries to crash NULL pointer dereference or divide by zero, enter an infinite loop or cause heap overflow caused by integer...