https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:11:51.667001+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04043 bdu:2024-04043 2026-10-03T20:11:51.827379+00:00 bdu:2024-04043 https://cve.radiocsirt.org/vuln/bell-cve-2023-47212 BELL-CVE-2023-47212 2026-10-03T20:11:51.827422+00:00

Affected: Alpaquita:23: stb, Alpaquita:stream: stb

 https://cve.radiocsirt.org/vuln/euvd-2026-258988 EUVD-2026-258988 2026-10-03T20:11:51.827452+00:00 EUVD-2026-258988 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47212 fkie_cve-2023-47212 2026-10-03T20:11:51.827464+00:00

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-w3gr-x835-r39j GHSA-w3gr-x835-r39j 2026-10-03T20:11:51.827489+00:00

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2023-47212 gsd-2023-47212 2026-10-03T20:11:51.827504+00:00 gsd-2023-47212 https://cve.radiocsirt.org/vuln/oesa-2024-1583 OESA-2024-1583 — stb security update 2026-10-03T20:11:51.827514+00:00

Affected: openEuler:22.03-LTS-SP3: stb

Single-file public domain libraries for C/C++. Security Fix(es): stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buffer in `start_decoder`. The root cause is a potential integer overflow in `sizeof(char*) * (f->comment_list_length)` which may make `setup_malloc` allocate less memory than required. Since there is another integer overflow an attacker may overflow it too to force `setup_malloc` to return 0 and make the exploit more reliable. This issue may lead to code execution.(CVE-2023-45681) A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.(CVE-2023-47212)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-47212 UBUNTU-CVE-2023-47212 2026-10-03T20:11:51.827540+00:00

Affected: Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb

A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.