VDB
GCVE-110-MAGEIA-2018-84
GCVE-110-MAGEIA-2018-84
Advisory Published
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing
uninitialized memory in the function vorbis_analysis_headerout() in
info.c when vi->channels<=0, a similar issue to Mozilla bug 550184
(CVE-2017-14632).
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability
exists in the function mapping0_forward() in mapping0.c, which may lead
to DoS when operating on a crafted audio file with vorbis_analysis()
(CVE-2017-14633).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | libvorbis | 0 (affected), 1.3.5-1.1.mga5 (unaffected) | — |
Browse GCVE Records
20,063 records in the GCVE database · Updated October 22, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.