https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:22:05.146881+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3703 ALSA-2019:3703 — Low: libvorbis security update 2026-10-03T10:22:05.161050+00:00

Affected: AlmaLinux:8: libvorbis, AlmaLinux:8: libvorbis-devel, AlmaLinux:8: libvorbis-devel-docs

The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.

Security Fix(es):

* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)

* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-03313 bdu:2020-03313 2026-10-03T10:22:05.161152+00:00 bdu:2020-03313 https://cve.radiocsirt.org/vuln/bell-cve-2018-10392 Withdrawn: BELL-CVE-2018-10392 — CVE-2018-10392 does not affect BellSoft software 2026-10-03T10:22:05.161184+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2018-08909 cnvd-2018-08909 2026-10-03T10:22:05.161212+00:00 cnvd-2018-08909 https://cve.radiocsirt.org/vuln/euvd-2026-64628 EUVD-2026-64628 2026-10-03T10:22:05.161235+00:00 EUVD-2026-64628 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10392 fkie_cve-2018-10392 2026-10-03T10:22:05.161255+00:00

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

 https://cve.radiocsirt.org/vuln/ghsa-gqh4-wfj8-7856 GHSA-gqh4-wfj8-7856 2026-10-03T10:22:05.161293+00:00

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

 https://cve.radiocsirt.org/vuln/gsd-2018-10392 gsd-2018-10392 2026-10-03T10:22:05.161321+00:00 gsd-2018-10392 https://cve.radiocsirt.org/vuln/msrc_cve-2018-10392 msrc_CVE-2018-10392 — mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels which allows remote… 2026-10-03T10:22:05.161341+00:00 msrc_CVE-2018-10392 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11009-1 openSUSE-SU-2024:11009-1 — libvorbis-devel-1.3.7-1.6 on GA media 2026-10-03T10:22:05.161371+00:00

libvorbis-devel-1.3.7-1.6 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:1563-1 SUSE-SU-2018:1563-1 — Security update for libvorbis 2026-10-03T10:22:05.161407+00:00

Security update for libvorbis

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10392 UBUNTU-CVE-2018-10392 2026-10-03T10:22:05.161435+00:00

Affected: Ubuntu:Pro:16.04:LTS: libvorbis, Ubuntu:18.04:LTS: libvorbis

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.