Every CVE Search/ Get API key

CVE-2020-0487

In read_metadata_vorbiscomment_ of stream_decoder.c, there is possible memory exhaustion due to a...

No scoreRejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

What each source reports

CVE List No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Record
CVE-2020-0487
Updated
2026-11-02
EUVDEUVD-2020-1985 No score

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Record
EUVD-2020-1985
Updated
2026-11-03
GitHub AdvisoriesGHSA-3h26-8wfg-f6vh No score

In read_metadata_vorbiscomment_ of stream_decoder.c, there is possible memory exhaustion due to a...

In read_metadata_vorbiscomment_ of stream_decoder.c, there is possible memory exhaustion due to a memory leak. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-124775381

Record
GHSA-3h26-8wfg-f6vh
Weakness
CWE-400
Updated
2026-11-02
NVD No score

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

Record
CVE-2020-0487
Updated
2026-11-02
OSVopenSUSE-SU-2020:2348-1 No score

Security update for flac

This update for flac fixes the following issues:

  • CVE-2020-0487: Fixed a memory leak (bsc#1180112).
  • CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:2348-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2350-1 No score

Security update for flac

This update for flac fixes the following issues:

  • CVE-2020-0487: Fixed a memory leak (bsc#1180112).
  • CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:2350-1
Updated
2026-11-02
OSVSUSE-SU-2020:3933-1 No score

Security update for flac

This update for flac fixes the following issues:

  • CVE-2020-0487: Fixed a memory leak (bsc#1180112).
  • CVE-2020-0499: Fixed an out-of-bounds access (bsc#1180099).
Record
SUSE-SU-2020:3933-1
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
flac
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise Module for Package Hub 15 SP1
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise Module for Package Hub 15 SP2
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 2 CVEs
before 1.3.2-3.6.1
1.3.2-3.6.1
flac
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
before 1.3.2-lp151.4.3.1
1.3.2-lp151.4.3.1
flac
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
before 1.3.2-lp152.5.3.1
1.3.2-lp152.5.3.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-0487 has been rejected by its source and should not be treated as a live vulnerability, published December 15, 2020.

References

Show 4 moreShow less
MoveEnter Open