CVE-2017-14160: The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a de...

Security readout for executives and security teams

CVE-2017-14160 is a flaw in Xiph.Org libvorbis 1.3.5 that can crash software when it processes a specially crafted MP4 file. The clearest business risk is service disruption in systems that ingest or scan untrusted media. The sources do not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where applications or services use Xiph.Org libvorbis 1.3.5, or affected downstream packages, to process untrusted MP4 or media files. Inventory should include servers, desktop applications, media ingestion pipelines, and scanners that depend on libvorbis. Treat this as a moderate operational-risk item. It is not currently supported by KEV evidence, but exposed media-processing services can be disrupted by malicious files. Patch during normal security maintenance, faster for public upload or automated ingestion environments. Mitigation focus: Apply vendor or distribution libvorbis security updates where available.; Prioritize systems that process untrusted or internet-supplied media files.; Check Debian, Gentoo, and upstream vendor guidance for fixed package versions..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.