Alpine/stb: high 7.8
stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in `f->vendor[len] = (char)'\0';`. The root cause is that if the len re
Action: Upgrade stb to 0_git20231012-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0_git20231012-r0 |
Sources
published · modified · JSON