QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2018-10392

Back to search

CVE-2018-10392

Published: Apr 26, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of channels, which allows remote attackers to cause a denial of service (heap-based buffer overflow or over-read) or possibly have unspecified other impact via a crafted file.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2019:3703
vendor-advisory
x_refsource_REDHAT
GLSA-202003-36
vendor-advisory
x_refsource_GENTOO

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now