Stb Vorbis
Approved changes feed: RSS · Atom
cpe:2.3:a:nothings:stb_vorbis:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nothings (fa9895af-3c4e-566d-93ad-91443ad5c8ab) |
|---|---|
| Product | Stb Vorbis (00657213-ebc5-5230-bc26-576b44d57832) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-89266 |
vulnerable | 2026-09-16 04:34:09.604454 |
stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands
HIGH (8.2)
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes or heap corruption.
Published: 2026-09-11T23:23:26.509Z
Updated: 2026-09-24T14:21:42.371Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.