Lucene search

Veracode Vulnerability DatabaseVERACODE:43964

HistoryOct 24, 2023 - 10:40 a.m.

Out-of-Bounds Write

2023-10-2410:40:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

out-of-bounds write

libstb.so

stb_vorbis.c

buffer overflow

heap-based

ogg vorbis file

vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.3%

JSON

libstb.so is vulnerable to Out-of-Bounds Writes. This vulnerability exists in the f->vendor[len] = (char)'\0' function of stb_vorbis.c because it does not properly allocate memory, which allows to an attacker to perform a heap-based buffer overflow via a crafted ogg vorbis file.

CPENameOperatorVersion
libstb.soeq0.0
libstb.soeq0.0

CPE	Name	Operator	Version
	libstb.so	eq	0.0
	libstb.so	eq	0.0

References

github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3652-L3658

github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3653

github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3658

github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3670C7-L3670C75

github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L950-L961

securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.3%

JSON

Related for VERACODE:43964