Off-by-one heap buffer write in start_decoder in stb_vorbis
CVE-2023-45678

6.5MEDIUM

Key Information:

Vendor: Nothings
Status: Stb
Vendor: CVE Published:; 21 October 2023

🔔 Create Nothings Vulnerability Alert

What is CVE-2023-45678?

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of buffer write in start_decoder because at maximum m->submaps can be 16 but submap_floor and submap_residue are declared as arrays of 15 elements. This issue may lead to code execution.

Affected Version(s)

stb <= 1.22

References

https://securitylab.github.com/advisories/GHSL-2023-145_G...

x_refsource_CONFIRM

https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd3...

x_refsource_MISC

https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd3...

x_refsource_MISC

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 21, 2023
Vulnerability Reserved
Oct 10, 2023

CVE-2023-45678 Data

.