Search for packages
| purl | pkg:alpm/archlinux/lib32-libvorbis@1.3.6-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-125v-6567-aaam | An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. |
CVE-2018-5146
|
| VCID-24pt-1dej-aaak | Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. |
CVE-2017-14632
|
| VCID-k1vq-z733-aaak | In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). |
CVE-2017-14633
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:44:36.718917+00:00 | Arch Linux Importer | Fixing | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-658 | 36.0.0 |
| 2025-03-28T07:44:36.685239+00:00 | Arch Linux Importer | Fixing | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-658 | 36.0.0 |
| 2025-03-28T07:44:36.662694+00:00 | Arch Linux Importer | Fixing | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-658 | 36.0.0 |
| 2024-09-18T01:59:40.727422+00:00 | Arch Linux Importer | Fixing | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-658 | 34.0.1 |
| 2024-09-18T01:59:40.701104+00:00 | Arch Linux Importer | Fixing | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-658 | 34.0.1 |
| 2024-09-18T01:59:40.673287+00:00 | Arch Linux Importer | Fixing | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-658 | 34.0.1 |
| 2024-01-03T22:25:56.504854+00:00 | Arch Linux Importer | Fixing | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-658 | 34.0.0rc1 |
| 2024-01-03T22:25:56.483567+00:00 | Arch Linux Importer | Fixing | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-658 | 34.0.0rc1 |
| 2024-01-03T22:25:56.462256+00:00 | Arch Linux Importer | Fixing | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-658 | 34.0.0rc1 |