https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:15:11 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03950 bdu:2025-03950 https://cve.radiocsirt.org/vuln/bdu:2025-03950 https://cve.radiocsirt.org/vuln/euvd-2026-162764 EUVD-2026-162764 https://cve.radiocsirt.org/vuln/euvd-2026-162764 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45676 <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.</p> <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-45676 https://cve.radiocsirt.org/vuln/gsd-2023-45676 gsd-2023-45676 https://cve.radiocsirt.org/vuln/gsd-2023-45676 https://cve.radiocsirt.org/vuln/opensuse-su-2025:0037-1 <p>Security update for SDL2_sound</p> <p>Security update for SDL2_sound</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:0037-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45676 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb</p> <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb</p> <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[i] = get8_packet(f);`. The root cause is an integer overflow in `setup_malloc`. A sufficiently large value in the variable `sz` overflows with `sz+7` in and the negative value passes the maximum available memory buffer check. This issue may lead to code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45676