CVE-2023-45681

Name of the Vulnerable Software and Affected Versions stb vorbis (affected versions not specified)

Description The issue is related to a potential integer overflow in sizeof(char*) * (f->comment list length) which may cause setup malloc to allocate less memory than required. This can lead to a memory write past an allocated heap buffer in start decoder when a crafted file is processed. An attacker may exploit this issue to gain access to confidential data, disrupt data integrity, and cause a denial of service. The issue may also lead to code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.