CVE-2026-5317 stb_vorbis越界写入漏洞

#include <stdio.h> #include "stb_vorbis.c" int main(int argc, char **argv) { if (argc < 2) { printf("Usage: %s <malicious.ogg>\n", argv[0]); return 1; } // Attempt to open the crafted audio file // The file must be crafted to trigger the start_decoder OOB write int error = 0; stb_vorbis *v = stb_vorbis_open_filename(argv[1], &error, NULL); if (v == NULL) { printf("Failed to open file or parsing error (expected for crash): %d\n", error); return -1; } // If we reach here without crashing, the exploit might have failed or been patched stb_vorbis_close(v); return 0; }