CVE-2019-13218

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Division by zero in the predict_point function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://nothings.org/stb_vorbis/Third Party Advisory
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6Patch, Third Party Advisory
https://github.com/nothings/stb/commits/master/stb_vorbis.cPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00045.htmlMailing List, Third Party Advisory
http://nothings.org/stb_vorbis/Third Party Advisory
https://github.com/nothings/stb/commit/98fdfc6df88b1e34a736d5e126e6c8139c8de1a6Patch, Third Party Advisory
https://github.com/nothings/stb/commits/master/stb_vorbis.cPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/01/msg00045.htmlMailing List, Third Party Advisory

Timeline

Published: Aug 15, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-132195.5A NULL pointer dereference in the get_window function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by op CVE-2019-13227.8An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of CVE-2019-132207.1Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of CVE-2019-132217.8A stack buffer overflow in the compute_codewords function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service o CVE-2019-132227.1An out-of-bounds read of a global buffer in the draw_line function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of CVE-2019-132235.5A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by ope CVE-2019-132249.8A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure, denial of CVE-2019-132256.5A NULL Pointer Dereference in match_at() in regexec.c in Oniguruma 6.9.2 allows attackers to potentially cause denial of service by providin CVE-2019-132267.0deepin-clone before 1.1.3 uses a predictable path /tmp/.deepin-clone/mount/<block-dev-basename> in the Helper::temporaryMountDevice() functi CVE-2019-132275.5In GUI mode, deepin-clone before 1.1.3 creates a log file at the fixed path /tmp/.deepin-clone.log as root, and follows symlinks there. An u CVE-2019-132284.7deepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks th CVE-2019-132295.5deepin-clone before 1.1.3 uses a fixed path /tmp/partclone.log in the Helper::getPartitionSizeInfo() function to write a log file as root, a