Wind River Support Network

HomeDefectsLIN7-9778

Fixed

LIN7-9778 : Security Advisory - libvorbis - CVE-2018-10393

Created: May 2, 2018 Updated: Sep 13, 2018

Resolved Date: Jun 21, 2018

Found In Version: 7.0.0.28

Fix Version: 7.0.0.29

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

https://nvd.nist.gov/vuln/detail/CVE-2018-10393