https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 00:52:57 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03949 bdu:2025-03949 https://cve.radiocsirt.org/vuln/bdu:2025-03949 https://cve.radiocsirt.org/vuln/euvd-2026-162763 EUVD-2026-162763 https://cve.radiocsirt.org/vuln/euvd-2026-162763 https://cve.radiocsirt.org/vuln/fkie_cve-2023-45677 <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[len] = (char)&#39;\0&#39;;`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f-&gt;vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f-&gt;comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution.</p> <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[len] = (char)&#39;\0&#39;;`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f-&gt;vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f-&gt;comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-45677 https://cve.radiocsirt.org/vuln/gsd-2023-45677 gsd-2023-45677 https://cve.radiocsirt.org/vuln/gsd-2023-45677 https://cve.radiocsirt.org/vuln/opensuse-su-2025:0037-1 <p>Security update for SDL2_sound</p> <p>Security update for SDL2_sound</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:0037-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45677 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb</p> <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[len] = (char)&#39;\0&#39;;`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f-&gt;vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f-&gt;comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libstb, Ubuntu:22.04:LTS: libstb, Ubuntu:24.04:LTS: libstb, Ubuntu:25.10: libstb, Ubuntu:26.04:LTS: libstb</p> <p>stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f-&gt;vendor[len] = (char)&#39;\0&#39;;`. The root cause is that if `len` read in `start_decoder` is a negative number and `setup_malloc` successfully allocates memory in that case, but memory write is done with a negative index `len`. Similarly if len is INT_MAX the integer overflow len+1 happens in `f-&gt;vendor = (char*)setup_malloc(f, sizeof(char) * (len+1));` and `f-&gt;comment_list[i] = (char*)setup_malloc(f, sizeof(char) * (len+1));`. This issue may lead to code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-45677