Issues · Xiph.Org · GitLab

CVE-2017-11333 - The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

vorbis#2332 · opened Sep 30, 2017 by Guido Günther
- CLOSED
- 6
updated Mar 17, 2018
CVE-2017-11735 - The vorbis_block_clear function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ogg file.

vorbis#2331 · opened Sep 30, 2017 by Guido Günther
- CLOSED
- 3
updated Oct 09, 2017
Missing functions in win32/ogg.def

ogg#2291 · opened Sep 16, 2017 by Michael Fink
- CLOSED
- 1
updated Sep 30, 2018
Missing function in libspeex.def

speex#2037 · opened Sep 16, 2017 by Michael Fink
- CLOSED
- 1
updated Oct 22, 2018
(CVE-2017-14633)an out-of-bound array read vul in function mapping0_forward() in libvorbis 1.3.5

vorbis#2329 · opened Sep 14, 2017 by Jiangxin
- CLOSED
- 4
updated Dec 11, 2017
(CVE-2017-14632)call oggpack_writeclear() with uninitialized stack var opb in function vorbis_analysis_headerout() when vi->channels<=0 in libvorbis 1.3.5

vorbis#2328 · opened Sep 13, 2017 by Jiangxin
- CLOSED
- 5
updated May 09, 2018
vorbisfile free of uninitialized memory if seek fails

vorbis#2327 · opened Jun 13, 2017 by Gitlab Bot
- CLOSED
- 4
updated Jan 28, 2019
vorbis git repository missing release markers

vorbis#2271 · opened May 29, 2016 by Jacob Lifshay
- CLOSED
- 1
updated Nov 01, 2017
vorbis_comment_add_tag() crash: very large alloca()

vorbis#2221 · opened Sep 05, 2015 by i80and
- CLOSED
- 0
updated Nov 01, 2017
_initial_pcmoffset uses error codes from vorbis_packet_blocksize in arithmetics

vorbis#2142 · opened Jan 05, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
"Null pointer dereference" [forwarded from Debian #774516]

vorbis#2140 · opened Jan 04, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
libvorbis-1.3.4 misdecodes streams with single-symbol codebooks

vorbis#2139 · opened Jan 01, 2015 by Andrew Church
- CLOSED
- 0
updated Nov 01, 2017
CHANGES changelog for libvorbis not updated since libvorbis 1.3.3

vorbis#2120 · opened Dec 11, 2014 by Tim Small
- CLOSED
- 1
updated Jun 10, 2020
tagcompare() uses toupper() and is sensitive to the current locale

vorbis#2079 · opened Nov 07, 2014 by David King
- CLOSED
- 2
updated Feb 02, 2019
Invalid memory access with samplingrate==0

vorbis#2078 · opened Nov 06, 2014 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
[libvorbis patch] -O20 and -O4 don't exist (emscripten JS cross-compile fix)

vorbis#2067 · opened Oct 31, 2014 by Brion Vibber
- CLOSED
- 0
updated Nov 01, 2017
Typos in Vorbis I specification

vorbis#2060 · opened Oct 10, 2014 by stefan
- CLOSED
- 0
updated Nov 01, 2017
Vorbis borks a pure 440Hz sine wave at the highest quality level

vorbis#2038 · opened Aug 08, 2014 by Artem S. Tashkinov won't fix
- CLOSED
- 0
updated Nov 01, 2017
Switched ai and hi in vorbisenc.c

vorbis#1982 · opened Oct 14, 2013 by Timothy Gu invalid
- CLOSED
- 0
updated Nov 01, 2017
Segfault in libvorbisenc when passing --advanced-encode-option disable_coupling to oggenc

vorbis#1975 · opened Sep 28, 2013 by aeliosheotup
- CLOSED
- 1
updated Apr 09, 2018

Prev
1
…
9
10
11
12
13
14
15
16
17
…
80
Next