https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:13:57 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:5941 <p><strong>Affected:</strong> AlmaLinux:8: libvpx, AlmaLinux:8: libvpx-devel</p> <p>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.</p> <p>Security Fix(es):</p> <p>* libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349) * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libvpx, AlmaLinux:8: libvpx-devel</p> <p>The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.</p> <p>Security Fix(es):</p> <p>* libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349) * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:5941 https://cve.radiocsirt.org/vuln/bdu:2024-04531 bdu:2024-04531 https://cve.radiocsirt.org/vuln/bdu:2024-04531 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0903 https://cve.radiocsirt.org/vuln/euvd-2026-217478 EUVD-2026-217478 https://cve.radiocsirt.org/vuln/euvd-2026-217478 https://cve.radiocsirt.org/vuln/fkie_cve-2024-5197 <p>There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond</p> <p>There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-5197 https://cve.radiocsirt.org/vuln/ghsa-4h58-f788-v8pw <p>There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond</p> <p>There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond</p> https://cve.radiocsirt.org/vuln/ghsa-4h58-f788-v8pw https://cve.radiocsirt.org/vuln/msrc_cve-2024-5197 msrc_CVE-2024-5197 https://cve.radiocsirt.org/vuln/msrc_cve-2024-5197 https://cve.radiocsirt.org/vuln/oesa-2024-1716 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libvpx, openEuler:22.03-LTS-SP1: libvpx, openEuler:22.03-LTS-SP3: libvpx, openEuler:24.03-LTS: libvpx</p> <p>libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide. Security Fix(es): There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond(CVE-2024-5197)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: libvpx, openEuler:22.03-LTS-SP1: libvpx, openEuler:22.03-LTS-SP3: libvpx, openEuler:24.03-LTS: libvpx</p> <p>libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide. Security Fix(es): There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond(CVE-2024-5197)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1716 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14100-1 <p>libvpx-devel-1.14.1-1.1 on GA media</p> <p>libvpx-devel-1.14.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14100-1 https://cve.radiocsirt.org/vuln/rhsa-2025:14138 <p>libvpx: Integer overflow in vpx_img_alloc()</p> <p>libvpx: Integer overflow in vpx_img_alloc()</p> https://cve.radiocsirt.org/vuln/rhsa-2025:14138 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5197 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvpx, Ubuntu:Pro:16.04:LTS: libvpx, Ubuntu:Pro:18.04:LTS: libvpx, Ubuntu:20.04:LTS: libvpx, Ubuntu:22.04:LTS: libvpx, Ubuntu:24.04:LTS: libvpx</p> <p>There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libvpx, Ubuntu:Pro:16.04:LTS: libvpx, Ubuntu:Pro:18.04:LTS: libvpx, Ubuntu:20.04:LTS: libvpx, Ubuntu:22.04:LTS: libvpx, Ubuntu:24.04:LTS: libvpx</p> <p>There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-5197 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1945 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente libvpx ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in der Komponente libvpx ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1945