CVE Feed

    Dashboard / CVE / CVE-2018-1000050

    CVE-2018-1000050

    Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13.

    Published:Feb 9, 2018
    Last Modified:Nov 21, 2024
    EPS:Feb 9, 2018
    EPSS Score:0.00645
    CVSS Score:8.8

    Affected Products

    Vendor
    Stb Vorbis Project
    Product
    Stb Vorbis

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-47212 (CVSS 9.8) — A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A speci…
    CVE-2019-13221 (CVSS 7.8) — A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker …
    CVE-2019-13217 (CVSS 7.8) — A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to ca…
    CVE-2019-13218 (CVSS 5.5) — Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a …
    CVE-2019-13220 (CVSS 7.1) — Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an …
    CVE-2019-13222 (CVSS 7.1) — An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an …
    CVE-2019-13223 (CVSS 5.5) — A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to ca…
    CVE-2019-13219 (CVSS 5.5) — A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High