CVE-2018-1000050 - CVE House
Back to Database
Status published High CVE-2018-1000050

Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer...

Vulnerability Description

Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000050

Credits & Attribution

No credits recorded in the NVD database.

References

More from stb vorbis project

View All →
CVE-2019-13223
A reachable assertion in the lookup1_values function in stb_vorbis through...
Medium 5.5
CVE-2019-13222
An out-of-bounds read of a global buffer in the draw_line...
High 7.1
CVE-2019-13221
A stack buffer overflow in the compute_codewords function in stb_vorbis...
High 7.8
CVE-2019-13220
Use of uninitialized stack variables in the start_decoder function in...
High 7.1
CVE-2019-13219
A NULL pointer dereference in the get_window function in stb_vorbis...
Medium 5.5

Affected Vendor

stb vorbis project

View all reports →

Affected Software

stb vorbis
Vulnerable Versions:
0

Timeline

Official Publish: February 9th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.