The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis version 1.3.5 can cause a denial of service (OOM) via a crafted wav file.
Source: libvorbis 1.3.5 Denial Of Service

The post libvorbis 1.3.5 Denial Of Service appeared first on MondoUnix.