Skip to content
OpenAdvisories
Unscored DSA-1591-1 3 CVEs

libvorbis - several vulnerabilities

Published Jun 3, 2008 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 libvorbis 1.1.2.dfsg-1.4

Vulnerabilities 3

  • Unscored —

    Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attack…

  • Unscored —

    Integer overflow in residue partition value (aka partvals) evaluation in Xiph.org libvorbis 1.2.0 and earlier allows re…

  • Unscored —

    Integer overflow in a certain quantvals and quantlist calculation in Xiph.org libvorbis 1.2.0 and earlier allows remote…