Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2026-34253

vorbis-tools: vorbis-tools ogg123: Arbitrary code execution via buffer underflow in remote control functionality

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Xiph
Products
Vorbis-tools
CVE-2023-43361

vorbis-tools: Buffer Overflow vulnerability

Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Redhat Xiph
Products
Enterprise Linux Vorbis-tools
CVE-2017-11331

vorbis-tools: Invalid memory allocation in wav_open function in oggenc/audio.c

The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a crafted wav file.

CVSS 3.1 · 5.5 Medium EPSS 3.8% KEV · Not listed
Vendors
Xiph
Products
Vorbis-tools
CVE-2014-9638

vorbis-tools: division by zero on crafted WAV file

oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of channels set to zero.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Fedoraproject Opensuse Xiph
Products
Fedora Opensuse Vorbis-tools
CVE-2015-6749

vorbis-tools: invalid AIFF file causes alloca() buffer overflow

Buffer overflow in the aiff_open function in oggenc/audio.c in vorbis-tools 1.4.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted AIFF file.

CVSS 2.0 · 4.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Xiph
Products
Vorbis-tools
CVE-2014-9639

vorbis-tools: integer overflow on crafted WAV file

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Fedoraproject Opensuse Xiph
Products
Fedora Opensuse Vorbis-tools
CVE-2014-9640

vorbis-tools: segfault when trying to encode trivial raw input

oggenc/oggenc.c in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted raw file.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed
Vendors
Opensuse Xiph
Products
Opensuse Vorbis-tools