CVE-2026-89266 Details

A heap buffer overflow vulnerability has been identified in the stb Vorbis audio decoding library, specifically in versions through 1.22. The issue arises in the start_decoder() function, where the allocation size for codebook multiplicands is improperly truncated from size_t to int. This flaw allows attackers to craft malicious Ogg Vorbis files with large entries and dimensions, triggering out-of-bounds writes that can lead to process crashes or heap corruption.

Users can update to the latest version of the stb Vorbis library, where this vulnerability has been addressed by changing the allocation function to properly handle size_t values and prevent overflow.