Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2023-5217

libvpx: Heap buffer overflow in vp8 encoding in libvpx

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS 3.1 · 8.8 High EPSS 49.0% KEV · Listed
Vendors
Apple Debian Fedoraproject and 5 more
Products
Ipados Iphone Os Debian Linux and 12 more
CVE-2023-6349

Heap overflow in libvpx

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

CVSS 4.0 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Webmproject
Products
Enterprise Linux Libvpx
CVE-2024-5197

Integer overflow in libvpx

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond

CVSS 4.0 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Redhat Webmproject
Products
Debian Linux Enterprise Linux Libvpx
CVE-2012-0823

libvpx: VP8 Codec decoder crash introduced in 0.9.7

VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Webmproject
Products
Libvpx