High USN-6964-1 1 CVE

orc vulnerability

Published Aug 15, 2024 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Noriko Totsuka discovered that ORC incorrectly handled certain
crafted file. An attacker could possibly use this issue to execute
arbitrary code.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	orc	1:0.4.31-1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS	orc	1:0.4.32-2ubuntu0.1
Ubuntu · 24.04 LTS 24.04:LTS	orc	1:0.4.38-1ubuntu0.1

Vulnerabilities 1

High 7.0

CVE-2024-40897

Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is trick…

GStreamer ORC orc orc Debian Ubuntu Azure Linux Alpine

Jul 26, 2024

References

report
https://ubuntu.com/security/CVE-2024-40897