CVE-2026-34253
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools...
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
CVE-2026-34253- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-124, CWE-124
- Updated
- 2026-11-02
EUVDEUVD-2026-30545
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
EUVD-2026-30545- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-45fh-4474-xc77
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools...
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
GHSA-45fh-4474-xc77- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-124
- Updated
- 2026-11-02
NVD
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
CVE-2026-34253- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-124
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2026-34253
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
DEBIAN-CVE-2026-34253- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2026-2375
vorbis-tools security update
Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as audio representations such as MPEG-4 (AAC), and similar to, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC.
Security Fix(es):
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.(CVE-2026-34253)
- Record
OESA-2026-2375- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVOESA-2026-2376
vorbis-tools security update
Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as audio representations such as MPEG-4 (AAC), and similar to, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC.
Security Fix(es):
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.(CVE-2026-34253)
- Record
OESA-2026-2376- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2026-2377
vorbis-tools security update
Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as audio representations such as MPEG-4 (AAC), and similar to, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC.
Security Fix(es):
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.(CVE-2026-34253)
- Record
OESA-2026-2377- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2026-2378
vorbis-tools security update
Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as audio representations such as MPEG-4 (AAC), and similar to, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC.
Security Fix(es):
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.(CVE-2026-34253)
- Record
OESA-2026-2378- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVOESA-2026-2486
vorbis-tools security update
Ogg Vorbis is a fully open, non-proprietary, patent-and-royalty-free, general-purpose compressed audio format for mid to high quality (8kHz-48.0kHz, 16+ bit, polyphonic) audio and music at fixed and variable bitrates from 16 to 128 kbps/channel. This places Vorbis in the same competitive class as audio representations such as MPEG-4 (AAC), and similar to, but higher performance than MPEG-1/2 audio layer 3, MPEG-4 audio (TwinVQ), WMA and PAC.
Security Fix(es):
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.(CVE-2026-34253)
- Record
OESA-2026-2486- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-34253
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
UBUNTU-CVE-2026-34253- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Updated
- 2026-11-02
OSVAZL-87002 No score
CVE-2026-34253 affecting package vorbis-tools 1.4.2-6
A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.
- Record
AZL-87002- Updated
- 2026-11-05
OSVMGASA-2026-0297 No score
Updated vorbis-tools package fixes a security vulnerability
The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution. (CVE-2026-34253)
- Record
MGASA-2026-0297- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10904-1 No score
vorbis-tools-1.4.3-2.1 on GA media
These are all security issues fixed in the vorbis-tools-1.4.3-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10904-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20891-1 No score
Security update for vorbis-tools
This update for vorbis-tools fixes the following issues:
Changes in vorbis-tools:
- CVE-2026-34253: Fix buffer underflow in the
ogg123utility in functionremotethreadofremote.c(bsc#1265361):
- Record
openSUSE-SU-2026:20891-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3114-1 No score
Security update for vorbis-tools
This update for vorbis-tools fixes the following issue
- CVE-2026-34253: buffer underflow in the
ogg123utility in functionremotethreadofremote.c(bsc#1265361).
- Record
SUSE-SU-2026:3114-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3115-1 No score
Security update for vorbis-tools
This update for vorbis-tools fixes the following issue
- CVE-2026-34253: buffer underflow in the
ogg123utility in functionremotethreadofremote.c(bsc#1265361).
- Record
SUSE-SU-2026:3115-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
vorbis-toolsAzure Linux:3 |
through 1.4.2-6 | None known |
vorbis-toolsDebian:12 |
All versions, plus listed versions 1.4.2-11.4.2-21.4.3-1 |
None known |
vorbis-toolsDebian:13 |
All versions, plus listed versions 1.4.3-1 |
None known |
vorbis-toolsDebian:14 |
All versions, plus listed versions 1.4.3-1 |
None known |
vorbis-toolsMageia:10 |
before 1.4.3-2.1.mga10 | 1.4.3-2.1.mga10 |
vorbis-toolsMageia:9 |
before 1.4.2-3.2.mga9 | 1.4.2-3.2.mga9 |
vorbis-toolsopenEuler:20.03-LTS-SP4 |
before 1.4.0-34.oe2003sp4 | 1.4.0-34.oe2003sp4 |
vorbis-toolsopenEuler:22.03-LTS-SP4 |
before 1.4.2-5.oe2203sp4 | 1.4.2-5.oe2203sp4 |
vorbis-toolsopenEuler:24.03-LTS |
before 1.4.2-5.oe2403 | 1.4.2-5.oe2403 |
vorbis-toolsopenEuler:24.03-LTS-SP3 |
before 1.4.2-5.oe2403sp3 | 1.4.2-5.oe2403sp3 |
Show 12 moreShow less
| Package | Affected | Fixed |
|---|---|---|
vorbis-toolsopenEuler:24.03-LTS-SP1 |
before 1.4.2-5.oe2403sp1 | 1.4.2-5.oe2403sp1 |
vorbis-toolsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 1.4.0-27.6.1 | 1.4.0-27.6.1 |
vorbis-toolsSUSE:Linux Enterprise Module for Desktop Applications 15 SP7 |
before 1.4.0-150000.3.6.1 | 1.4.0-150000.3.6.1 |
vorbis-toolsUbuntu:16.04:LTS |
All versions, plus listed versions 1.4.0-6ubuntu11.4.0-7ubuntu1 |
None known |
vorbis-toolsUbuntu:18.04:LTS |
All versions, plus listed versions 1.4.0-101.4.0-10.1 |
None known |
vorbis-toolsUbuntu:20.04:LTS |
All versions, plus listed versions 1.4.0-11 |
None known |
vorbis-toolsUbuntu:22.04:LTS |
All versions, plus listed versions 1.4.0-111.4.2-1 |
None known |
vorbis-toolsUbuntu:24.04:LTS |
All versions, plus listed versions 1.4.2-1build21.4.2-1build41.4.2-2 |
None known |
vorbis-toolsUbuntu:25.10 |
All versions, plus listed versions 1.4.2-2build11.4.3-1 |
None known |
vorbis-toolsUbuntu:26.10 |
All versions, plus listed versions 1.4.3-1build1 |
None known |
vorbis-toolsUbuntu:26.04:LTS |
All versions, plus listed versions 1.4.3-11.4.3-1build1 |
None known |
vorbis-toolsopenSUSE:Tumbleweed |
before 1.4.3-2.1 | 1.4.3-2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-34253 is a high vulnerability (CVSS 8.2) in Red Hat Enterprise Linux 6, published May 15, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. Fixed in vorbis-tools 1.4.3-2.1.mga10.
References
github.com/xiph/vorbis-tools/blob/0b3fbf42eb3897d32f4a75baa2dc915a4ca45e8e/ogg123/remote.c
gitlab.xiph.org/xiph/vorbis-tools/-/work_items/2332
access.redhat.com/security/cve/CVE-2026-34253
bugzilla.redhat.com/show_bug.cgi?id=2477925
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34253.json
Show 21 moreShow less
nvd.nist.gov/vuln/detail/CVE-2026-34253
security-tracker.debian.org/tracker/CVE-2026-34253
advisories.mageia.org/MGASA-2026-0297.html
bugs.mageia.org/show_bug.cgi?id=35627
lists.opensuse.org/archives/list/[email protected]/message/QQDC2BQN5WTT7MV425PV3C4SL4HR3JD4
lists.fedoraproject.org/archives/list/[email protected]/message/FQREVQVTSI5B3ALQBRUPJMWUOU724VOS
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-2375
suse.com/support/update/announcement/2026/suse-su-20263114-1
bugzilla.suse.com/1265361
ubuntu.com/security/CVE-2026-34253
cve.org/CVERecord?id=CVE-2026-34253