CVE-2020-0487
In read_metadata_vorbiscomment_ of stream_decoder.c, there is possible memory exhaustion due to a...
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
What each source reports
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- Record
CVE-2020-0487- Updated
- 2026-11-02
EUVDEUVD-2020-1985 No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- Record
EUVD-2020-1985- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3h26-8wfg-f6vh No score
In read_metadata_vorbiscomment_ of stream_decoder.c, there is possible memory exhaustion due to a...
In read_metadata_vorbiscomment_ of stream_decoder.c, there is possible memory exhaustion due to a memory leak. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124775381
- Record
GHSA-3h26-8wfg-f6vh- Weakness
- CWE-400
- Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none
- Record
CVE-2020-0487- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2348-1 No score
Security update for flac
This update for flac fixes the following issues:
- CVE-2020-0487: Fixed a memory leak (bsc#1180112).
- CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:2348-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2350-1 No score
Security update for flac
This update for flac fixes the following issues:
- CVE-2020-0487: Fixed a memory leak (bsc#1180112).
- CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:2350-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:3933-1 No score
Security update for flac
This update for flac fixes the following issues:
- CVE-2020-0487: Fixed a memory leak (bsc#1180112).
- CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).
- Record
SUSE-SU-2020:3933-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flacSUSE:Linux Enterprise Module for Basesystem 15 SP1 From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise Module for Package Hub 15 SP1 From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise Module for Package Hub 15 SP2 From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 2 CVEs |
before 1.3.2-3.6.1 | 1.3.2-3.6.1 |
flacopenSUSE:Leap 15.1 From an advisory covering 2 CVEs |
before 1.3.2-lp151.4.3.1 | 1.3.2-lp151.4.3.1 |
flacopenSUSE:Leap 15.2 From an advisory covering 2 CVEs |
before 1.3.2-lp152.5.3.1 | 1.3.2-lp152.5.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-0487 has been rejected by its source and should not be treated as a live vulnerability, published December 15, 2020.