Wind River Support Network

HomeDefectsLIN8-9146

Fixed

LIN8-9146 : Security Advisory - libvorbis - CVE-2018-10393

Created: May 2, 2018 Updated: Dec 3, 2018

Resolved Date: May 28, 2018

Found In Version: 8.0.0.25

Fix Version: 8.0.0.26

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read.

https://nvd.nist.gov/vuln/detail/CVE-2018-10393