Search for packages
| purl | pkg:alpm/archlinux/lib32-libvorbis@1.3.5-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-125v-6567-aaam
Aliases: CVE-2018-5146 |
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. |
Affected by 0 other vulnerabilities. |
|
VCID-24pt-1dej-aaak
Aliases: CVE-2017-14632 |
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. |
Affected by 0 other vulnerabilities. |
|
VCID-k1vq-z733-aaak
Aliases: CVE-2017-14633 |
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:44:36.713762+00:00 | Arch Linux Importer | Affected by | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-658 | 36.0.0 |
| 2025-03-28T07:44:36.681045+00:00 | Arch Linux Importer | Affected by | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-658 | 36.0.0 |
| 2025-03-28T07:44:36.657819+00:00 | Arch Linux Importer | Affected by | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-658 | 36.0.0 |
| 2024-09-18T01:59:40.722276+00:00 | Arch Linux Importer | Affected by | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-658 | 34.0.1 |
| 2024-09-18T01:59:40.695912+00:00 | Arch Linux Importer | Affected by | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-658 | 34.0.1 |
| 2024-09-18T01:59:40.668002+00:00 | Arch Linux Importer | Affected by | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-658 | 34.0.1 |
| 2024-01-03T22:25:56.500233+00:00 | Arch Linux Importer | Affected by | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-658 | 34.0.0rc1 |
| 2024-01-03T22:25:56.478923+00:00 | Arch Linux Importer | Affected by | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-658 | 34.0.0rc1 |
| 2024-01-03T22:25:56.457611+00:00 | Arch Linux Importer | Affected by | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-658 | 34.0.0rc1 |