CVE-2013-0899

CVE-2013-0899 is an integer overflow vulnerability in the Opus codec, specifically within the padding implementation of the opus_packet_parse_impl function. This flaw, affecting Opus before version 1.0.2 and subsequently Google Chrome and other products, allows remote attackers to trigger a denial of service via an out-of-bounds read using a crafted, long packet. With a CVSS score of 5.0, it is considered a medium-severity vulnerability, requiring no authentication and having low attack complexity, though its impact is limited to availability. There is no evidence of active exploitation, and no public exploit code is available, despite some community discussion and media coverage at the time of its disclosure.