XI
Vendor
Xiph
19
CVEs
0
On KEV
1
New 30D
Products
SP6.5
speex
xiph
4 CVEs0 on KEV1 new
VO7.8
Vorbis-tools
Xiph
6 CVEs0 on KEV0 new
IC8.1
Icecast
Xiph
3 CVEs0 on KEV0 new
TH9.8
Theora
Xiph
2 CVEs0 on KEV0 new
IE–
Icecast Ezstream
Xiph
1 CVEs0 on KEV0 new
LI5.5
Libao
Xiph
1 CVEs0 on KEV0 new
LI–
Libfishsound
Xiph
1 CVEs0 on KEV0 new
OP7.8
Opusfile
Xiph
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116741 New | SP speex xiph | 6.5 | Oct 26 | Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes |
| CVE-2026-5673 | TH Theora Xiph | 7.1 | Apr 6 | Libtheora: libtheora: denial of service or information disclosure via malformed avi file processing |
| CVE-2024-56431 | TH Theora Xiph | 9.8 | Dec 25 | oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift |
| CVE-2023-43361 | VO Vorbis-tools Xiph | 7.8 | Oct 2 | Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg… |
| CVE-2022-47021 | OP Opusfile Xiph | 7.8 | Jan 20 | A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or… |
| CVE-2020-23904 | SP Speex Xiph | 5.5 | Nov 10 | A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file |
| CVE-2020-23903 | SP Speex Xiph | 5.5 | Nov 10 | A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file |
| CVE-2018-18820 | IC Icecast Xiph | 8.1 | Nov 5 | A buffer overflow was discovered in the URL-authentication backend of the Icecast before 2.4.4 |
| CVE-2017-11548 | LI Libao Xiph | 5.5 | Jul 31 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3 file |
| CVE-2017-11331 | VO Vorbis-tools Xiph | 5.5 | Jul 31 | The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file |
| CVE-2015-6749 | VO Vorbis-tools Xiph | – | Sep 21 | Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file |
| CVE-2015-3026 | IC Icecast Xiph | – | Apr 29 | Icecast before 2.4.2, when a stream_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a… |
| CVE-2014-9640 | VO Vorbis-tools Xiph | – | Jan 23 | oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file |
| CVE-2014-9639 | VO Vorbis-tools Xiph | – | Jan 23 | Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an… |
| CVE-2014-9638 | VO Vorbis-tools Xiph | – | Jan 23 | oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero |
| CVE-2011-4612 | IC Icecast Xiph | – | Nov 20 | icecast before 2.3.3 allows remote attackers to inject control characters such as newlines into the error loc (error.log) via a crafted URL |
| CVE-2008-1686 | SP Speex Xiph | – | Apr 8 | Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox,… |
| CVE-2007-1344 | IE Icecast Ezstream Xiph | – | Mar 8 | Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML configuration file processed by the (1)… |