stb_vorbis is a single file MIT... CVE-2023-45682

- AV AC AU C I A
发布: 2023-10-21
修订: 2023-10-26

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds read in `DECODE` macro when `var` is negative. As it can be seen in the definition of `DECODE_RAW` a negative `var` is a valid value. This issue may be used to leak internal memory allocation information.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息