Vorbis comments integer overflows
I do not currently have a test sample, but from looking at the code, vorbis_ParseComment() suffers from a very similar bug as #17592 (closed)
I do not currently have a test sample, but from looking at the code, vorbis_ParseComment() suffers from a very similar bug as #17592 (closed)
VideoLAN code repository instance