vulnerability

FreeBSD: VID-304d92c3-00c5-11ef-bd52-080027bff743 (CVE-2023-45682): sdl2_sound -- multiple vulnerabilities

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Apr 22, 2024
Added
Dec 10, 2025
Modified
Dec 10, 2025

Description

GitHub Security Lab reports: stb_image.h and stb_vorbis libraries contain several memory access violations of different severity Wild address read in stbi__gif_load_next (GHSL-2023-145). Multi-byte read heap buffer overflow in stbi__vertical_flip (GHSL-2023-146). Disclosure of uninitialized memory in stbi__tga_load (GHSL-2023-147). Double-free in stbi__load_gif_main_outofmem (GHSL-2023-148). Null pointer dereference in stbi__convert_format (GHSL-2023-149). Possible double-free or memory leak in stbi__load_gif_main (GHSL-2023-150). Null pointer dereference because of an uninitialized variable (GHSL-2023-151). 0 byte write heap buffer overflow in start_decoder (GHSL-2023-165) Multi-byte write heap buffer overflow in start_decoder (GHSL-2023-166) Heap buffer out of bounds write in start_decoder (GHSL-2023-167) Off-by-one heap buffer write in start_decoder (GHSL-2023-168) Attempt to free an uninitialized memory pointer in vorbis_deinit (GHSL-2023-169) Null pointer dereference in vorbis_deinit (GHSL-2023-170) Out of bounds heap buffer write (GHSL-2023-171) Wild address read in vorbis_decode_packet_rest (GHSL-2023-172)

Solution

freebsd-upgrade-package-sdl2_sound
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.