Stb Vorbis
Approved changes feed: RSS · Atom
cpe:2.3:a:stb_vorbis_project:stb_vorbis:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Stb Vorbis Project (4989f97d-3375-5b82-951d-e0073415f393) |
|---|---|
| Product | Stb Vorbis (8913cfd4-353f-572b-8469-21cb9ba4bb48) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libstb |
purl2cpe | 2026-06-01 10:15:56.600476 |
pkg:deb/ubuntu/libstb |
purl2cpe | 2026-06-01 10:15:56.600479 |
pkg:github/nothings/stb |
purl2cpe | 2026-06-01 10:15:56.600482 |
pkg:rpm/fedora/stb |
purl2cpe | 2026-06-01 10:15:56.600484 |
pkg:rpm/opensuse/stb |
purl2cpe | 2026-06-01 10:15:56.600487 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-89266 |
vulnerable | 2026-09-16 04:34:09.605345 |
stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands
HIGH (8.2)
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes or heap corruption.
Published: 2026-09-11T23:23:26.509Z
Updated: 2026-09-24T14:21:42.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13223 |
vulnerable | 2026-06-08 05:12:42.002115 |
Details available
A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file.
Published: 2019-08-15T00:00:00.000Z
Updated: 2024-08-04T23:49:23.976Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13222 |
vulnerable | 2026-06-08 05:12:42.001806 |
Details available
An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.
Published: 2019-08-15T00:00:00.000Z
Updated: 2024-08-04T23:49:23.610Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13221 |
vulnerable | 2026-06-08 05:12:42.001482 |
Details available
A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or execute arbitrary code by opening a crafted Ogg Vorbis file.
Published: 2019-08-15T00:00:00.000Z
Updated: 2024-08-04T23:41:10.488Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13220 |
vulnerable | 2026-06-08 05:12:42.001148 |
Details available
Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.
Published: 2019-08-15T00:00:00.000Z
Updated: 2024-08-04T23:41:10.551Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13219 |
vulnerable | 2026-06-08 05:12:42.000803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13218 |
vulnerable | 2026-06-08 05:12:42.000447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13217 |
vulnerable | 2026-06-08 05:12:41.999977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000050 |
vulnerable | 2026-06-08 05:10:25.358195 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.