Search for packages
| purl | pkg:alpm/archlinux/libvorbis@1.3.5-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-125v-6567-aaam
Aliases: CVE-2018-5146 |
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. |
Affected by 0 other vulnerabilities. |
|
VCID-1n2s-g3w5-aaak
Aliases: CVE-2017-11333 |
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file. |
Affected by 0 other vulnerabilities. |
|
VCID-24pt-1dej-aaak
Aliases: CVE-2017-14632 |
Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. |
Affected by 0 other vulnerabilities. |
|
VCID-k1vq-z733-aaak
Aliases: CVE-2017-14633 |
In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:44:42.621446+00:00 | Arch Linux Importer | Affected by | VCID-1n2s-g3w5-aaak | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2025-03-28T07:44:42.587779+00:00 | Arch Linux Importer | Affected by | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2025-03-28T07:44:42.552956+00:00 | Arch Linux Importer | Affected by | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2025-03-28T07:44:42.522699+00:00 | Arch Linux Importer | Affected by | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2024-09-18T01:59:45.289395+00:00 | Arch Linux Importer | Affected by | VCID-1n2s-g3w5-aaak | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-09-18T01:59:45.264901+00:00 | Arch Linux Importer | Affected by | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-09-18T01:59:45.238219+00:00 | Arch Linux Importer | Affected by | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-09-18T01:59:45.214147+00:00 | Arch Linux Importer | Affected by | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-01-03T22:26:01.232198+00:00 | Arch Linux Importer | Affected by | VCID-1n2s-g3w5-aaak | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |
| 2024-01-03T22:26:01.207984+00:00 | Arch Linux Importer | Affected by | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |
| 2024-01-03T22:26:01.184084+00:00 | Arch Linux Importer | Affected by | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |
| 2024-01-03T22:26:01.160056+00:00 | Arch Linux Importer | Affected by | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |