CVE-2018-10392 PUBLISHED

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

EPSS 1.42% · 80.5th percentile

Risk Scores

EPSS Score
1.42%
80.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSlibvorbis0, 1.3.4-2, 1.3.4-3
Ubuntu:18.04:LTSlibvorbis0, 1.3.5-4, 1.3.5-4.1

Timeline

References

Open in Interactive Console →