Issues · Xiph.Org · GitLab

CVE-2017-11735 - The vorbis_block_clear function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ogg file.

vorbis#2331 · created Sep 30, 2017 by Guido Günther
- CLOSED
- 3
updated Oct 09, 2017
Missing functions in win32/ogg.def

ogg#2291 · created Sep 16, 2017 by Michael Fink
- CLOSED
- 1
updated Sep 30, 2018
Missing function in libspeex.def

speex#2037 · created Sep 16, 2017 by Michael Fink
- CLOSED
- 1
updated Oct 22, 2018
(CVE-2017-14633)an out-of-bound array read vul in function mapping0_forward() in libvorbis 1.3.5

vorbis#2329 · created Sep 14, 2017 by Jiangxin
- CLOSED
- 4
updated Dec 11, 2017
(CVE-2017-14632)call oggpack_writeclear() with uninitialized stack var opb in function vorbis_analysis_headerout() when vi->channels<=0 in libvorbis 1.3.5

vorbis#2328 · created Sep 13, 2017 by Jiangxin
- CLOSED
- 5
updated May 09, 2018
vorbisfile free of uninitialized memory if seek fails

vorbis#2327 · created Jun 13, 2017 by Gitlab Bot
- CLOSED
- 4
updated Jan 28, 2019
vorbis git repository missing release markers

vorbis#2271 · created May 29, 2016 by Jacob Lifshay
- CLOSED
- 1
updated Nov 01, 2017
vorbis_comment_add_tag() crash: very large alloca()

vorbis#2221 · created Sep 05, 2015 by i80and
- CLOSED
- 0
updated Nov 01, 2017
_initial_pcmoffset uses error codes from vorbis_packet_blocksize in arithmetics

vorbis#2142 · created Jan 05, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
"Null pointer dereference" [forwarded from Debian #774516]

vorbis#2140 · created Jan 04, 2015 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
libvorbis-1.3.4 misdecodes streams with single-symbol codebooks

vorbis#2139 · created Jan 01, 2015 by Andrew Church
- CLOSED
- 0
updated Nov 01, 2017
CHANGES changelog for libvorbis not updated since libvorbis 1.3.3

vorbis#2120 · created Dec 11, 2014 by Tim Small
- CLOSED
- 1
updated Jun 10, 2020
tagcompare() uses toupper() and is sensitive to the current locale

vorbis#2079 · created Nov 07, 2014 by David King
- CLOSED
- 2
updated Feb 02, 2019
Invalid memory access with samplingrate==0

vorbis#2078 · created Nov 06, 2014 by Martin Steghöfer
- CLOSED
- 0
updated Nov 01, 2017
[libvorbis patch] -O20 and -O4 don't exist (emscripten JS cross-compile fix)

vorbis#2067 · created Oct 31, 2014 by Brion Vibber
- CLOSED
- 0
updated Nov 01, 2017
Typos in Vorbis I specification

vorbis#2060 · created Oct 10, 2014 by stefan
- CLOSED
- 0
updated Nov 01, 2017
Vorbis borks a pure 440Hz sine wave at the highest quality level

vorbis#2038 · created Aug 08, 2014 by Artem S. Tashkinov won't fix
- CLOSED
- 0
updated Nov 01, 2017
Switched ai and hi in vorbisenc.c

vorbis#1982 · created Oct 14, 2013 by Timothy Gu invalid
- CLOSED
- 0
updated Nov 01, 2017
Segfault in libvorbisenc when passing --advanced-encode-option disable_coupling to oggenc

vorbis#1975 · created Sep 28, 2013 by aeliosheotup
- CLOSED
- 1
updated Apr 09, 2018
libvorbis-1.3.3 fails to link its tests

vorbis#1974 · created Sep 13, 2013 by heirecka
- CLOSED
- 0
updated Nov 01, 2017

Prev
1
…
4
5
6
7
8
9
10
11
12
…
80
Next