Most recent entries from all

ALSA-2023:5537 — Important: libvpx security update

Affected: AlmaLinux:8: libvpx, AlmaLinux:8: libvpx-devel

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) * libvpx: crash related to VP9 encoding in libvpx (CVE-2023-44488)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2023-06350

EUVD-2026-187166

fkie_cve-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

GHSA-wc24-pw3j-j6vw

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

gsd-2023-44488

msrc_CVE-2023-44488 — VP9 in libvpx before 1.13.1 mishandles widths leading to a crash related to encoding.

msrc_CVE-2023-44488

OESA-2023-1740 — libvpx security update

Affected: openEuler:20.03-LTS-SP1: libvpx, openEuler:20.03-LTS-SP3: libvpx, openEuler:22.03-LTS: libvpx, openEuler:22.03-LTS-SP1: libvpx, openEuler:22.03-LTS-SP2: libvpx

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide. Security Fix(es): VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.(CVE-2023-44488) Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)(CVE-2023-5217)

RHSA-2023:5534 — Red Hat Security Advisory: libvpx security update

libvpx: Heap buffer overflow in vp8 encoding in libvpx libvpx: crash related to VP9 encoding in libvpx

RHSA-2023:5537 — Red Hat Security Advisory: libvpx security update

libvpx: Heap buffer overflow in vp8 encoding in libvpx libvpx: crash related to VP9 encoding in libvpx

UBUNTU-CVE-2023-44488

Affected: Ubuntu:Pro:14.04:LTS: libvpx, Ubuntu:Pro:16.04:LTS: libvpx, Ubuntu:Pro:18.04:LTS: libvpx, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: firefox, Ubuntu:20.04:LTS: libvpx, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: libvpx and 5 more

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

WID-SEC-W-2023-2599 — Red Hat Enterprise Linux (libvpx): Mehrere Schwachstellen

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente libvpx ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder beliebigen Code auszuführen.