CVE-2023-45681 - CVE House
Back to Database
Status published High CVE-2023-45681

Out of bounds heap buffer write in stb_vorbis

Vulnerability Description

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `start_decoder`. The root cause is a potential integer overflow in `sizeof(char*) * (f->comment_list_length)` which may make `setup_malloc` allocate less memory than required. Since there is another integer overflow an attacker may overflow it too to force `setup_malloc` to return 0 and make the exploit more reliable. This issue may lead to code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45681

Credits & Attribution

No credits recorded in the NVD database.

References

More from nothings

View All →
CVE-2023-45682
Wild address read in vorbis_decode_packet_rest in stb_vorbis
Medium 5.3
CVE-2023-45680
Null pointer dereference in vorbis_deinit in stb_vorbis
Medium 5.3
CVE-2023-45679
Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis
High 7.3
CVE-2023-45678
Off-by-one heap buffer write in start_decoder in stb_vorbis
Medium 6.5
CVE-2023-45677
Heap buffer out of bounds write in start_decoder in stb_vorbis
High 7.3

Affected Vendor

Affected Software

stb
Vulnerable Versions:
<= 1.22

Timeline

Official Publish: October 20th, 2023
Last Modified: February 13th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-787

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact