CVE-2018-1000050

8.8 highEPSS 1.8%

High (8.8) in stb vorbis project stb vorbis. EPSS 1.8% chance of exploitation in the next 30 days.

Sean Barrett stb_vorbis version 1.12 and earlier contains a Buffer Overflow vulnerability in All vorbis decoding paths. that can result in memory corruption, denial of service, comprised execution of host program. This attack appear to be exploitable via Victim must open a specially crafted Ogg Vorbis file. This vulnerability appears to have been fixed in 1.13.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-02-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

stb_vorbis_project:stb_vorbis

References

https://github.com/nothings/stb/commit/244d83bc3d859293f55812d48b3db168e581f6ab
https://github.com/nothings/stb/commit/244d83bc3d859293f55812d48b3db168e581f6ab

Check your stack JSON