Stb Vorbis Project Stb Vorbis
8 CVEs affecting Stb Vorbis Project Stb Vorbis. Latest disclosed: 2019-08-15. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000050 | High | 8.8 | 2018-02-09 | Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, d… |
CVE-2019-13221 | High | 7.8 | 2019-08-15 | A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary… |
CVE-2019-13217 | High | 7.8 | 2019-08-15 | A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code… |
CVE-2019-13222 | High | 7.1 | 2019-08-15 | An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose… |
CVE-2019-13220 | High | 7.1 | 2019-08-15 | Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose… |
CVE-2019-13223 | Medium | 5.5 | 2019-08-15 | A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg… |
CVE-2019-13219 | Medium | 5.5 | 2019-08-15 | A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg… |
CVE-2019-13218 | Medium | 5.5 | 2019-08-15 | Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis… |