A heap-based buffer overflow vulnerability exists in the comment functionality of stb _vorbis.c v1.22. A specially crafted .ogg file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.

Legit Security Blog

The Legit Security Blog. Our mission is to secure every organization's software factory (code, pipelines, infrastructure and people) for faster and more secure software releases.

Listed: