LI
Product
Libvorbis
by Xiph.org · last CVE Dec 26, 2020
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 3Low 0
Watch

Add Libvorbis to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-20412
6.5
1%
Dec 26
lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file
Affected: 1.3.2 before 1.3.6
CVE-2017-14633
6.5
2%
Sep 21
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted…
Affected: 1.3.5
CVE-2017-11333
5.5
5%
Jul 31
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file
Affected: 1.3.5
Showing 3