NULL Pointer Dereference in stb_vorbis Affects Multiple Platforms
CVE-2019-13219

5.5MEDIUM

Key Information:

Vendor: Stb Vorbis Project
Status: Stb Vorbis
Vendor: CVE Published:; 15 August 2019

🔔 Create Stb Vorbis Project Vulnerability Alert

What is CVE-2019-13219?

A NULL pointer dereference vulnerability exists in the get_window function of stb_vorbis, allowing attackers to trigger a denial of service condition by supplying a specially crafted Ogg Vorbis file. Exploiting this flaw can lead to application crashes, impacting the availability of services reliant on audio playback or processing in systems using stb_vorbis.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://nothings.org/stb_vorbis/

https://github.com/nothings/stb/commits/master/stb_vorbis.c

https://github.com/nothings/stb/commit/98fdfc6df88b1e34a7...

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Aug 15, 2019
Vulnerability Reserved
Jul 3, 2019

JSON

Stb Vorbis Project

What is CVE-2019-13219?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.