https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T19:23:19.944554+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:5941 ALSA-2024:5941 — Moderate: libvpx security update 2026-10-03T19:23:20.092141+00:00

Affected: AlmaLinux:8: libvpx, AlmaLinux:8: libvpx-devel

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349) * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-05778 bdu:2024-05778 2026-10-03T19:23:20.092213+00:00 bdu:2024-05778 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 certfr-2024-avi-0903 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T19:23:20.092232+00:00 certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/euvd-2026-7664 EUVD-2026-7664 2026-10-03T19:23:20.092248+00:00 EUVD-2026-7664 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6349 fkie_cve-2023-6349 2026-10-03T19:23:20.092260+00:00

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

 https://cve.radiocsirt.org/vuln/gsd-2023-6349 gsd-2023-6349 2026-10-03T19:23:20.092283+00:00 gsd-2023-6349 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6349 msrc_CVE-2023-6349 — Heap overflow in libvpx 2026-10-03T19:23:20.092294+00:00 msrc_CVE-2023-6349 https://cve.radiocsirt.org/vuln/rhsa-2024:5941 RHSA-2024:5941 — Red Hat Security Advisory: libvpx security update 2026-10-03T19:23:20.092311+00:00

libvpx: Heap buffer overflow related to VP9 encoding libvpx: Integer overflow in vpx_img_alloc()

 https://cve.radiocsirt.org/vuln/rhsa-2026:4128 RHSA-2026:4128 — Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA) 2026-10-03T19:23:20.092330+00:00

giflib: out-of-bounds read in DumpScreen2RGB() in gif2rgb.c in gif2rgb tool golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service kernel: insufficient TCP source port randomness leads to client identification libvpx: Heap buffer overflow related to VP9 encoding openjpeg: Malicious files can cause the program to enter a large loop openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints libsndfile: Reachable assertion in mpeg_l3_encoder_close pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6349 UBUNTU-CVE-2023-6349 2026-10-03T19:23:20.092362+00:00

Affected: Ubuntu:Pro:14.04:LTS: libvpx, Ubuntu:Pro:16.04:LTS: libvpx, Ubuntu:Pro:18.04:LTS: libvpx, Ubuntu:20.04:LTS: libvpx, Ubuntu:22.04:LTS: libvpx

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1945 WID-SEC-W-2024-1945 — Red Hat Enterprise Linux (libvpx): Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T19:23:20.092389+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente libvpx ausnutzen, um einen Denial of Service Angriff durchzuführen.