OPENSUSE-SU-2025:0039-1: stb&distro=openSUSE Leap 15.6

CVSS: UnknownPublished
Published 31-01-2025Last modified 04-02-2026

Vulnerability summary

OPENSUSE-SU-2025:0039-1 is a vulnerability in stb&distro=openSUSE Leap 15.6 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 7 · Downstream 0 · Related 7

Timeline

  1. 31-01-2025
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for stb This update for stb fixes the following issues: Addressing the follow security issues (boo#1216478): * CVE-2019-13217: heap buffer overflow in start_decoder() * CVE-2019-13218: stack buffer overflow in compute_codewords() * CVE-2019-13219: uninitialized memory in vorbis_decode_packet_rest() * CVE-2019-13220: out-of-range read in draw_line() * CVE-2019-13221: issue with large 1D codebooks in lookup1_values() * CVE-2019-13222: unchecked NULL returned by get_window() * CVE-2019-13223: division by zero in predict_point()

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Opensuse1 product
  • stb&distro=openSUSE Leap 15.6< 20240910-bp156.2.3.1
Suse1 product
  • stb&distro=SUSE Package Hub 15 SP6< 20240910-bp156.2.3.1

2 vendors · 2 products

References

9 links