PatchTheCVEstb vorbis vulnerabilities and fixes
Recent CVEs affecting stb vorbis, with upgrade or downgrade steps. 8 tracked.
Also searched as: stbvorbis.
stb vorbis has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2019-08-15. Highest priority: CVE-2019-13221 (score 51/100).
- CVE-2019-13223 MEDIUM 5.5 UPGRADE MITIGATE A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to ca
- CVE-2019-13222 HIGH 7.1 UPGRADE MITIGATE An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an
- CVE-2019-13221 HIGH 7.8 UPGRADE MITIGATE A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker
- CVE-2019-13220 HIGH 7.1 UPGRADE MITIGATE Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an
- CVE-2019-13219 MEDIUM 5.5 UPGRADE MITIGATE A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to c
- CVE-2019-13218 MEDIUM 5.5 UPGRADE MITIGATE Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a
- CVE-2019-13217 HIGH 7.8 UPGRADE MITIGATE A heap buffer overflow in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to ca
- CVE-2018-1000050 HIGH 8.8 UPGRADE Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decodi
FAQ
How do I fix stb vorbis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is stb vorbis being exploited right now?
None of the tracked stb vorbis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which stb vorbis CVE should I patch first?
CVE-2019-13221 currently ranks highest (51/100): A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker .