CVE-2019-13220

Name of the Vulnerable Software and Affected Versions stb vorbis versions through 2019-03-04

Description The issue is related to the use of uninitialized stack variables in the start decoder function, which can be exploited by opening a crafted Ogg Vorbis file. This can lead to a denial of service or the disclosure of sensitive information.

Recommendations For stb vorbis versions through 2019-03-04, consider updating to a version released after 2019-03-04 to resolve the issue. As a temporary workaround, restrict the opening of Ogg Vorbis files from untrusted sources to minimize the risk of exploitation.