CVE Catalog
CVE-2017-14160
HighSummary
The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.
Risk Assessment
An attacker may exploit this vulnerability to remotely crash the application, potentially leading to service availability interruptions.
Recommendation
It is recommended to update to the latest version of libvorbis to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Xiph.Org libvorbis 1.3.5
Original NVD description (English source)
The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and application crash) or possibly have unspecified other impact via a crafted mp4 file.