CVE-2026-89266 | nothings stb_vorbis up to 1.22 start_decoder heap-based overflow (Nessus ID 345382)

A vulnerability has been found in nothings stb_vorbis up to 1.22 and classified as critical. Affected by this issue is the function start_decoder. Performing a manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2026-89266. It is possible to initiate the attack remotely. There is no exploit available. Weiterlesen