CVE-2017-11333: Xiph.org Libvorbis

Medium severity, CVSS 5.5. EPSS: 4.8% chance of exploitation in the next 30 days.

The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file.

Affected products

• Xiph.org Libvorbis: version 1.3.5 only

Published 2017-07-31. Last modified 2026-06-17.