Vulnerabilities

Filters

2 selected

11 records

Sort

Vendor: nothings Component: Stb Vorbis.c Clear all filters

TI-2026-04649 CVE-2026-5317 · GHSA-8mhm-8wmq-8793

Nothings stb stb_vorbis.c start_decoder out-of-bounds write

MEDIUM 57

A security flaw has been discovered in Nothings stb up to 1.22.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00433 Published 2026-04-02 No fix listed CWE-119

TI-2026-04648 CVE-2026-5316 · GHSA-pmw2-j962-7frc

Nothings stb stb_vorbis.c setup_free allocation of resources

LOW 24

A vulnerability was identified in Nothings stb up to 1.22.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00447 Published 2026-04-02 No fix listed CWE-400

TI-2023-25531 CVE-2023-47212 · GHSA-w3gr-x835-r39j

Integer overflow in stb_vorbis.c

HIGH 82

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0141 Published 2024-05-01 No fix listed CWE-190

TI-2023-24481 CVE-2023-45682

Wild address read in vorbis_decode_packet_rest in stb_vorbis

HIGH 70

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00577 Published 2023-10-20 No fix listed CWE-125

TI-2023-24480 CVE-2023-45681

Out of bounds heap buffer write in stb_vorbis

HIGH 69

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00512 Published 2023-10-20 No fix listed CWE-787

TI-2023-24479 CVE-2023-45680

Null pointer dereference in vorbis_deinit in stb_vorbis

MEDIUM 64

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00551 Published 2023-10-20 No fix listed CWE-476

TI-2023-24478 CVE-2023-45679

Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00505 Published 2023-10-20 No fix listed CWE-415

TI-2023-24477 CVE-2023-45678

Off-by-one heap buffer write in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0074 Published 2023-10-20 No fix listed CWE-787

TI-2023-24476 CVE-2023-45677

Heap buffer out of bounds write in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00523 Published 2023-10-20 No fix listed CWE-787

TI-2023-24475 CVE-2023-45676

Multi-byte write heap buffer overflow in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00505 Published 2023-10-20 No fix listed CWE-787

TI-2023-24474 CVE-2023-45675

0 byte write heap buffer overflow in start_decoder in stb_vorbis

HIGH 73

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00739 Published 2023-10-20 No fix listed CWE-787