PT-2026-41302 · Xiph.Org Foundation · Vorbis-Tools

·

CVE-2026-34253

·

Published

2026-05-15

·

Updated

2026-07-17

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:N/C:N/I:P/A:C
Name of the Vulnerable Software and Affected Versions vorbis-tools version 1.4.3
Description A stack buffer underflow exists in the ogg123 utility within the remotethread() function located in remote.c. This issue occurs during the processing of malformed input via the remote control functionality, which can lead to application crashes or potential code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-87002
BDU:2026-12840
CVE-2026-34253
OESA-2026-2375
OESA-2026-2376
OESA-2026-2377
OESA-2026-2378
OESA-2026-2486
OPENSUSE-SU-2026:10904-1
SUSE-SU-2026:3114-1
SUSE-SU-2026:3115-1

Affected Products

Vorbis-Tools