CVE-2023-43361

CVE-2023-43361 is a buffer‑overflow vulnerability in Vorbis-tools 1.4.2 that allows a local attacker to execute arbitrary code and cause a denial of service during wav→ogg conversions. Connected advisories confirm that patches/remediations exist across multiple distributions (e.g., Fedora updates...

CVE-2017-11331

CVE-2017-11331 affects Xiph.Org vorbis-tools 1.4.0; the wav_open function in oggenc/audio.c can be triggered by a crafted WAV file to cause a denial of service via memory allocation error. Multiple connected sources (CNVD-2017-19461, OSV CVE-2017-11331, OSV) corroborate a remote-exploitation vect...

CVE-2015-6749

CVE-2015-6749 is a buffer overflow in the aiff_open function of oggenc/audio.c in vorbis-tools

CVE-2014-9638

CVE-2014-9638 affects vorbis-tools 1.4.0 oggenc: processing a WAV with channels set to zero causes a division-by-zero crash. CVE-2014-9639 is an integer overflow in oggenc via crafted channel counts, triggering out-of-bounds memory access. CVE-2014-9640 is an out-of-bounds read in oggenc via craf...

CVE-2014-9639

CVE-2014-9639 affects vorbis-tools (og genc) when processing WAV input: an integer overflow triggered by a crafted number of channels can cause out-of-bounds memory access and crash (DoS). The issue is reported for vorbis-tools 1.4.0; several advisories note that patched versions are available (u...

CVE-2014-9640

CVE-2014-9640 affects vorbis-tools 1.4.0, specifically oggenc/oggenc.c. The vulnerability is an out-of-bounds read triggered by a crafted raw file, enabling a remote attacker to cause a denial of service. Multiple distributions reference this issue and provide patches/upstream fixes (e.g., Debian...