Search for packages
| purl | pkg:alpm/archlinux/libvorbis@1.3.6-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-125v-6567-aaam | An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. |
CVE-2018-5146
|
| VCID-1n2s-g3w5-aaak | The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file. |
CVE-2017-11333
|
| VCID-24pt-1dej-aaak | Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184. |
CVE-2017-14632
|
| VCID-k1vq-z733-aaak | In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis(). |
CVE-2017-14633
|
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T07:44:42.627068+00:00 | Arch Linux Importer | Fixing | VCID-1n2s-g3w5-aaak | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2025-03-28T07:44:42.592168+00:00 | Arch Linux Importer | Fixing | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2025-03-28T07:44:42.557875+00:00 | Arch Linux Importer | Fixing | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2025-03-28T07:44:42.527519+00:00 | Arch Linux Importer | Fixing | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-367 | 36.0.0 |
| 2024-09-18T01:59:45.294086+00:00 | Arch Linux Importer | Fixing | VCID-1n2s-g3w5-aaak | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-09-18T01:59:45.269520+00:00 | Arch Linux Importer | Fixing | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-09-18T01:59:45.242830+00:00 | Arch Linux Importer | Fixing | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-09-18T01:59:45.218989+00:00 | Arch Linux Importer | Fixing | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-367 | 34.0.1 |
| 2024-01-03T22:26:01.236822+00:00 | Arch Linux Importer | Fixing | VCID-1n2s-g3w5-aaak | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |
| 2024-01-03T22:26:01.212621+00:00 | Arch Linux Importer | Fixing | VCID-24pt-1dej-aaak | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |
| 2024-01-03T22:26:01.188802+00:00 | Arch Linux Importer | Fixing | VCID-k1vq-z733-aaak | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |
| 2024-01-03T22:26:01.164793+00:00 | Arch Linux Importer | Fixing | VCID-125v-6567-aaam | https://security.archlinux.org/AVG-367 | 34.0.0rc1 |