CVE-2014-9639

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.57%

Published

Jan 23, 2015

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Integer overflow in oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (crash) via a crafted number of channels in a WAV file, which triggers an out-of-bounds memory access.

Affected Products (5)

xiph · vorbis-toolsvulnerable

fedoraproject · fedoravulnerable

opensuse · opensusevulnerable

References (16)

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150543.html

http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150570.html

http://lists.opensuse.org/opensuse-updates/2015-03/msg00054.html

http://seclists.org/fulldisclosure/2015/Jan/78

http://www.openwall.com/lists/oss-security/2015/01/21/5

http://www.openwall.com/lists/oss-security/2015/01/22/9

http://www.securityfocus.com/bid/72295

https://trac.xiph.org/ticket/2136

Exploit

KEV Catalog EPSS Scores Vendors All CVEs