Unrated severityNVD Advisory· Published Aug 15, 2019· Updated Aug 4, 2024

CVE-2019-13220

Description

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a crafted Ogg Vorbis file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

stb_vorbis/stb_vorbisdescription
Nothings/Stb Vorbis.cllm-fuzzy
Range: <=2019-03-04
osv-coords3 versions
pkg:rpm/opensuse/stb&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/stb&distro=openSUSE%20Tumbleweed pkg:rpm/suse/stb&distro=SUSE%20Package%20Hub%2015%20SP6
< 20240910-bp156.2.3.1+ 2 more
- (no CPE)range: < 20240910-bp156.2.3.1
- (no CPE)range: < 2.36.1594640766.b42009b-1.4
- (no CPE)range: < 20240910-bp156.2.3.1

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2023/01/msg00045.htmlmitremailing-list
nothings.org/stb_vorbis/mitre
github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6mitre
github.com/nothings/stb/commits/master/stb_vorbis.cmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000