Back to Database
Status published
Medium
CVE-2023-45682
Wild address read in vorbis_decode_packet_rest in stb_vorbis
Vulnerability Description
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is negative. As it can be seen in the definition of `DECODE_RAW` a negative `var` is a valid value. This issue may be used to leak internal memory allocation information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-45682
Credits & Attribution
No credits recorded in the NVD database.
References
- https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
- https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L1717-L1729
- https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L1754-L1756
- https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3231
More from nothings
View All →CVE-2023-45681
Out of bounds heap buffer write in stb_vorbis
High
7.3
CVE-2023-45680
Null pointer dereference in vorbis_deinit in stb_vorbis
Medium
5.3
CVE-2023-45679
Attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis
High
7.3
CVE-2023-45678
Off-by-one heap buffer write in start_decoder in stb_vorbis
Medium
6.5
CVE-2023-45677
Heap buffer out of bounds write in start_decoder in stb_vorbis
High
7.3
Affected Vendor
nothings
View all reports →Affected Software
stb
Vulnerable Versions:
<= 1.22
Timeline
Official Publish:
October 20th, 2023
Last Modified:
September 12th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L