Out-of-Bounds Array Read Vulnerability in Xiph.Org libvorbis 1.3.5

CVE-2017-14633 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when operating on a crafted audio file with vorbis_analysis().

Learn more about our Web Application Penetration Testing UK.