Xiph.org vulnerabilities

Products

• Libvorbis 13

Newest

• stepmania, xiph.org libvorbis +1 more lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has... CVE-2020-20412 6.5 MediumDecember 26, 2020
• xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 more bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. CVE-2018-10393 Fix available 7.5 HighApril 26, 2018
• xiph.org libvorbis, debian linux, redhat enterprise linux +3 more +5 more mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of... CVE-2018-10392 Fix available 8.8 HighApril 26, 2018
• xiph.org libvorbis, debian linux +1 more The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to... CVE-2017-14160 Fix available 8.8 HighSeptember 21, 2017
• xiph.org libvorbis, canonical ubuntu linux, debian linux +2 more In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function... CVE-2017-14633 Fix available 6.5 MediumSeptember 21, 2017
• xiph.org libvorbis, canonical ubuntu linux, debian linux +2 more Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the... CVE-2017-14632 Fix available 9.8 CriticalSeptember 21, 2017
• xiph.org libvorbis The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote... CVE-2017-11333 Public exploitFix available 5.5 MediumJuly 31, 2017
• xiph.org libvorbis, canonical ubuntu linux +1 more Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which... CVE-2008-2009 Fix available 4.3 MediumMay 16, 2008
• xiph.org libvorbis Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and... CVE-2008-1423 Fix available 9.3 HighMay 16, 2008
• xiph.org libvorbis Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0... CVE-2008-1420 Fix available 6.8 MediumMay 16, 2008
• xiph.org libvorbis Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim,... CVE-2008-1419 Fix available 4.3 MediumMay 16, 2008
• xiph.org libvorbis Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to... CVE-2007-4066 Fix available 4.3 MediumSeptember 21, 2007
• xiph.org libvorbis lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent... CVE-2007-4065 Fix available 4.3 MediumSeptember 21, 2007