libvorbis can write out of bounds on codebook decoding when processing malformed Vorbis audio data (CVE-2018-5146).
{ "section": "core" }