CVE-2013-0899

opus < 1.0.2 - Denial of Service via Integer Overflow in Padding Implementation

Title source: llm
STIX 2.1

Description

Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.

References (8)

Core 8
Core References
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2013/02/stable-channel-update_21.html
Patch x_refsource_confirm
https://codereview.chromium.org/11575026
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16027
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-03/msg00045.html
Various Sources x_refsource_confirm
http://opus-codec.org/downloads/

Scores

EPSS 0.0151
EPSS Percentile 71.2%

Details

CWE
CWE-190
Status published
Products (4)
google/chrome < 25.0.1364.97
opensuse/opensuse 12.1
opensuse/opensuse 12.2
opus-codec/opus < 1.0.2
Published Feb 23, 2013
Tracked Since Feb 18, 2026