Denial Of Service (DoS)

libstb.so is vulnerable to Denial Of Service. The vulnerability is due to the start_decoder function’s processing of a specially crafted file, leading to a memory allocation failure due to the function returning early, setting f->comment_list to NULL, but f->comment_list_length is not reset. An attacker can exploit this issue to cause a denial of service.