https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:16:20.408497+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03950 bdu:2025-03950 2026-10-03T18:16:20.414293+00:00 bdu:2025-03950 https://cve.radiocsirt.org/vuln/euvd-2026-162764 EUVD-2026-162764 2026-10-03T18:16:20.414331+00:00 EUVD-2026-162764 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45676 fkie_cve-2023-45676 2026-10-03T18:16:20.414345+00:00

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.

 https://cve.radiocsirt.org/vuln/gsd-2023-45676 gsd-2023-45676 2026-10-03T18:16:20.414379+00:00 gsd-2023-45676 https://cve.radiocsirt.org/vuln/opensuse-su-2025:0037-1 openSUSE-SU-2025:0037-1 — Security update for SDL2_sound 2026-10-03T18:16:20.414391+00:00

Security update for SDL2_sound

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45676 UBUNTU-CVE-2023-45676 2026-10-03T18:16:20.414413+00:00

Affected: Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.