CVE-2017-14632

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels<=0, a similar issue to Mozilla bug 550184.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gitlab.xiph.org/xiph/vorbis/issues/2328Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/04/msg00033.htmlThird Party Advisory
https://usn.ubuntu.com/3569-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4113Third Party Advisory
https://gitlab.xiph.org/xiph/vorbis/issues/2328Vendor Advisory
https://lists.debian.org/debian-lts-announce/2018/04/msg00033.htmlThird Party Advisory
https://usn.ubuntu.com/3569-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4113Third Party Advisory

Timeline

Published: Sep 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-146336.5In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may le CVE-2017-146346.5In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a craf CVE-2017-146358.8In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage CVE-2017-146369.8Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexe CVE-2017-146379.8In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp. However, this can also cause a write to an ille CVE-2017-146386.5AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL poin CVE-2017-146398.8AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-b CVE-2017-146406.5A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The CVE-2017-146416.5A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerabili CVE-2017-146426.5A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fau CVE-2017-146436.5The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu CVE-2017-146448.8A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write,