Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libvorbis | Mar 6, 2018 | Sep 21, 2017 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 21, 2017 |
| Debian | — | Upgrade libvorbis | Feb 16, 2018 | Sep 21, 2017 |
| Freebsd | — | Upgrade libvorbis | Mar 17, 2018 | Mar 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libvorbis | Dec 4, 2019 | Sep 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libvorbis | Sep 24, 2019 | Sep 21, 2017 |
| Suse | — | Upgrade libvorbis-x86Upgrade libvorbisenc2Upgrade libvorbis0-32bitUpgrade libvorbisUpgrade libvorbisfile3-32bitUpgrade libvorbis-32bitUpgrade libvorbisfile3Upgrade libvorbis-docUpgrade libvorbisenc2-32bitUpgrade libvorbis0Upgrade libvorbis-devel | Jan 4, 2018 | Sep 21, 2017 |
| Ubuntu | — | Upgrade libvorbis0a | Feb 14, 2018 | Sep 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub