plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis...
Moderate severity
Unreviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Oct 9, 2017
Published to the GitHub Advisory Database
May 17, 2022
Last updated
Feb 3, 2023
plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
References