CVE-2017-14633 PUBLISHED

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

EPSS 1.00% · 76.9th percentile

Risk Scores

EPSS Score
1.00%
76.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibvorbis1.3.5-3, 1.3.4-2, 1.3.4-3
Ubuntu:14.04:LTSlibvorbis1.3.2-1.3, 1.3.2-1.3ubuntu1, 0

Timeline

References

Open in Interactive Console →