CPE Details
stb_vorbis Project stb_vorbis 2019-03-04
2019-03-04
2020-01-02
15h04 +00:00
15h04 +00:00
2020-01-02
15h04 +00:00
15h04 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:stb_vorbis_project:stb_vorbis:2019-03-04:*:*:*:*:*:*:*
Informations
Vendor
stb_vorbis_projectProduct
stb_vorbisVersion
2019-03-04Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. | 7.8 |
High |
||
| Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. | 5.5 |
Medium |
||
| A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. | 5.5 |
Medium |
||
| Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file. | 7.1 |
High |
||
| A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file. | 7.8 |
High |
||
| An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file. | 7.1 |
High |
||
| A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file. | 5.5 |
Medium |
2025©
tesweb SA
