Out-of-bounds write in stb_vorbis.c - CVE-2023-45675

Vulnerability identifier: #VU102289

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-45675

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write and lead to code execution.

stb_vorbis.c
openEuler
stb_perlin-devel
stb_hexwave-devel
stb_leakcheck-devel
stb_herringbone_wang_tile-devel
stb_c_lexer-devel
stb_tilemap_editor-devel
stb_ds-devel
stb_voxel_render-devel
stb_divide-devel
stb_connected_components-devel
stb_image_resize-devel
stb-help
stb-devel
stb
stb_easy_font-devel
stb_rect_pack-devel
stb_sprintf-devel
stb_dxt-devel
stb_textedit-devel
stb_image_write-devel
stb_vorbis-devel
stb_truetype-devel
stb_image-devel

Install update from vendor's repository.

stb_perlin-devel - update to 0.5.20220908git8b5f1f3-0.13
stb_hexwave-devel - update to 0.5.20220908git8b5f1f3-0.13
stb_leakcheck-devel - update to 0.6.20220908git8b5f1f3-0.13
stb_herringbone_wang_tile-devel - update to 0.7.20220908git8b5f1f3-0.13
stb_c_lexer-devel - update to 0.12.20220908git8b5f1f3-0.13
stb_tilemap_editor-devel - update to 0.42.20220908git8b5f1f3-0.13
stb_ds-devel - update to 0.67.20220908git8b5f1f3-0.13
stb_voxel_render-devel - update to 0.89.20220908git8b5f1f3-0.13
stb_divide-devel - update to 0.94.20220908git8b5f1f3-0.13
stb_connected_components-devel - update to 0.96.20220908git8b5f1f3-0.13
stb_image_resize-devel - update to 0.97.20220908git8b5f1f3-0.13
stb-help - update to 0.20220908git8b5f1f3-0.13
stb-devel - update to 0.20220908git8b5f1f3-0.13
stb - update to 0.20220908git8b5f1f3-0.13
stb_easy_font-devel - update to 1.1.20220908git8b5f1f3-0.13
stb_rect_pack-devel - update to 1.1.20220908git8b5f1f3-0.13
stb_sprintf-devel - update to 1.10.20220908git8b5f1f3-0.13
stb_dxt-devel - update to 1.12.20220908git8b5f1f3-0.13
stb_textedit-devel - update to 1.14.20220908git8b5f1f3-0.13
stb_image_write-devel - update to 1.16.20220908git8b5f1f3-0.13
stb_vorbis-devel - update to 1.22.20220908git8b5f1f3-0.13
stb_truetype-devel - update to 1.26.20220908git8b5f1f3-0.13
stb_image-devel - update to 2.27.20220908git8b5f1f3-0.13

• https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3652-L3658
• https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L3658
• https://securitylab.github.com/advisories/GHSL-2023-145_GHSL-2023-151_stb_image_h/
• https://github.com/nothings/stb/blob/5736b15f7ea0ffb08dd38af21067c314d6a3aae9/stb_vorbis.c#L950-L960
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UVQ7ONFH5GWLMXYEAJG32A3EUKUCEVCR/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QVABVF4GEM6BYD5L4L64RCRSXUHY6LGN/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NMXKOKPP4BKTNUTF5KSRDQAWOUILQZNO/

• Multiple vulnerabilities in stb_vorbis.c
• openEuler 22.03 LTS SP2 update for stb
• openEuler 22.03 LTS SP3 update for stb