Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file. NOTE: this may overlap CVE-2018-5146.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xiph Libvorbis 输入验证错误漏洞
Vulnerability Description
Xiph Libvorbis是Xiph基金会的一个可用于编解码音频的工具。该工具内置了一个通用的音乐编码格式。 Xiph Libvorbis 1.3.6之前版本存在输入验证错误漏洞，该漏洞源于lib/codebook.c没有通过OGG文件进行数组边界检查。
CVSS Information
N/A
Vulnerability Type
N/A