CVE-2023-45682

Name of the Vulnerable Software and Affected Versions stb vorbis (affected versions not specified)

Description The issue concerns a crafted file that may trigger an out of bounds read in the DECODE macro when the var is negative. According to the definition of DECODE RAW, a negative var is a valid value. This can potentially be used to leak internal memory allocation information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.