Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25318
HistoryMay 10, 2020 - 11:25 p.m.

Remote Code Execution

2020-05-1023:25:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.036 Low

EPSS

Percentile

91.7%

libvorbis is vulnerable to remote code execution. The vulnerability exists when freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

CPENameOperatorVersion
libvorbis:3.4eq1.3.5-r1