https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:40:05.422962+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2019:3703 ALSA-2019:3703 — Low: libvorbis security update 2026-10-03T18:40:05.695422+00:00

Affected: AlmaLinux:8: libvorbis, AlmaLinux:8: libvorbis-devel, AlmaLinux:8: libvorbis-devel-docs

The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates.

Security Fix(es):

* libvorbis: heap buffer overflow in mapping0_forward function (CVE-2018-10392)

* libvorbis: stack buffer overflow in bark_noise_hybridmp function (CVE-2018-10393)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2020-03314 bdu:2020-03314 2026-10-03T18:40:05.695488+00:00 bdu:2020-03314 https://cve.radiocsirt.org/vuln/bell-cve-2018-10393 Withdrawn: BELL-CVE-2018-10393 — CVE-2018-10393 does not affect BellSoft software 2026-10-03T18:40:05.695506+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/cnvd-2018-10108 cnvd-2018-10108 2026-10-03T18:40:05.695522+00:00 cnvd-2018-10108 https://cve.radiocsirt.org/vuln/euvd-2026-64638 EUVD-2026-64638 2026-10-03T18:40:05.695535+00:00 EUVD-2026-64638 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10393 fkie_cve-2018-10393 2026-10-03T18:40:05.695545+00:00

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

 https://cve.radiocsirt.org/vuln/ghsa-w834-9cg6-cm69 GHSA-w834-9cg6-cm69 2026-10-03T18:40:05.695565+00:00

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

 https://cve.radiocsirt.org/vuln/gsd-2018-10393 gsd-2018-10393 2026-10-03T18:40:05.695579+00:00 gsd-2018-10393 https://cve.radiocsirt.org/vuln/msrc_cve-2018-10393 msrc_CVE-2018-10393 — bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. 2026-10-03T18:40:05.695589+00:00 msrc_CVE-2018-10393 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11009-1 openSUSE-SU-2024:11009-1 — libvorbis-devel-1.3.7-1.6 on GA media 2026-10-03T18:40:05.695605+00:00

libvorbis-devel-1.3.7-1.6 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2018:1321-1 SUSE-SU-2018:1321-1 — Security update for libvorbis 2026-10-03T18:40:05.695627+00:00

Security update for libvorbis

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10393 UBUNTU-CVE-2018-10393 2026-10-03T18:40:05.695642+00:00

Affected: Ubuntu:Pro:16.04:LTS: libvorbis, Ubuntu:18.04:LTS: libvorbis

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.