Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 442
Alerts This Week
Warning Icon 1 442

Mageia vorbis-tools Critical Buffer Underflow Vulnerability CVE-2026-34253

mageia
Calendar Grey July 25, 2026
Scroller Mageia
This security update for Mageia addresses a critical buffer underflow issue in vorbis-tools. Immediate action is recommended.
A security vulnerability in the ogg123 utility of vorbis-tools 1.4.3 has been fixed, addressing a buffer underflow risk that may allow code execution via malformed input.

Summary

Description: The updated package fixes a security vulnerability: A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in the remote control functionality when processing malformed input, leading to a stack buffer underflow that can cause application crashes and potentially allow code execution. (CVE-2026-34253)

References

- https://bugs.mageia.org/show_bug.cgi?id=35627

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/QQDC2BQN5WTT7MV425PV3C4SL4HR3JD4/

- https://gitlab.xiph.org/xiph/vorbis-tools/-/work_items/2332

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FQREVQVTSI5B3ALQBRUPJMWUOU724VOS/

- https://www.cve.org/CVERecord?id=CVE-2026-34253

Topics%20covered

Topics Covered

security advisory critical code execution application crash buffer underflow Mageia

Resolution

SRPMS

- 10/core/vorbis-tools-1.4.3-2.1.mga10

- 9/core/vorbis-tools-1.4.2-3.2.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 25 Jul 2026
URL: https://advisories.mageia.org/MGASA-2026-0297.html
Type: security
CVE: CVE-2026-34253

Topics%20covered

Topics Covered

security advisory critical code execution application crash buffer underflow Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.