libvorbis vulnerabilities (Alpine)

6 vulnerabilities.

• libvorbis Alpine bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. CVE-2018-10393 Fix available 7.5 HighApril 26, 2018
• libvorbis Alpine mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of... CVE-2018-10392 Fix available 8.8 HighApril 26, 2018
• libvorbis Alpine An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own... CVE-2018-5146 Public exploitFix available EPSS 11.9% 8.8 HighMarch 16, 2018
• libvorbis Alpine The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to... CVE-2017-14160 Fix available 8.8 HighSeptember 21, 2017
• libvorbis Alpine In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function... CVE-2017-14633 Fix available 6.5 MediumSeptember 21, 2017
• libvorbis Alpine Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the... CVE-2017-14632 Fix available 9.8 CriticalSeptember 21, 2017