CVE-2026-89266— stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands
Quick assessment
Affected
nothings stb_vorbis
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
stb_vorbis 库（版本 1.22 及之前）中存在一个堆缓冲区溢出漏洞。该漏洞位于 函数中：codebook 乘法因子的分配大小被从 截断为 。攻击者可以通过构造一个包含较大 和 值的恶意 Ogg Vorbis 文件，触发越界写入，从而导致进程崩溃或堆内存损坏。
Possible ATT&CK Techniques 1 AI
T1204 · User Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-89266
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands
Source: CVE Program / CVE List V5
Vulnerability Description
stb_vorbis through 1.22 contains a heap buffer overflow in start_decoder() where the codebook multiplicands allocation size is truncated from size_t to int. Attackers can craft a malicious Ogg Vorbis file with large entries and dimensions values to trigger out-of-bounds writes, causing process crashes or heap corruption.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| nothings | stb_vorbis | 0 ~ 1.22 | - |
|
II. Public POCs for CVE-2026-89266
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-89266
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-89266 (1)
Vendor Advisories for CVE-2026-89266 (1)
Proof of Concept for CVE-2026-89266 (1)
Other References for CVE-2026-89266 (1)
IV. Related Vulnerabilities
Same vendor: nothings
-
CVE-2026-5317
Nothings stb stb_vorbis.c start_decoder out-of-bounds write -
CVE-2026-5316
Nothings stb stb_vorbis.c setup_free allocation of resources -
CVE-2026-5315
Nothings stb TTF File stb_truetype.h stbtt__buf_get8 out-of- -
CVE-2026-5314
Nothings stb TTF File stb_truetype.h stbtt_InitFont_internal -
CVE-2026-5313
Nothings stb GIF Decoder stb_image.h stbi__gif_load_next den
Same weakness: CWE-787
-
CVE-2026-78547
Out-of-Bounds Write -
CVE-2026-88053
Tesseract: Heap out-of-bounds write in Classify::ReadIntTemp -
CVE-2026-88051
Tesseract: Heap out-of-bounds write in GenericVector<T>::rea -
CVE-2026-88050
Tesseract: Out-of-bounds write in UnicharCompress via unvali -
CVE-2026-88049
Tesseract: Heap out-of-bounds write in LSTM::Forward via na_
V. Comments for CVE-2026-89266
No comments yet