Most recent entries from all

ALSA-2025:9118 — Important: libvpx security update

Affected: AlmaLinux:9: libvpx, AlmaLinux:9: libvpx-devel

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

* libvpx: Double-free in libvpx encoder (CVE-2025-5283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-06284

certfr-2025-avi-0455 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro…

certfr-2025-avi-0455

cnvd-2025-11244

EUVD-2026-257981

fkie_cve-2025-5283

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

GHSA-j84v-78j2-55gh

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

OESA-2025-1592 — libvpx security update

Affected: openEuler:24.03-LTS-SP1: libvpx, openEuler:20.03-LTS-SP4: libvpx, openEuler:22.03-LTS-SP3: libvpx, openEuler:22.03-LTS-SP4: libvpx, openEuler:24.03-LTS: libvpx

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide. Security Fix(es):

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)(CVE-2025-5283)

openSUSE-SU-2025:15210-1 — chromedriver-138.0.7204.96-1.1 on GA media

chromedriver-138.0.7204.96-1.1 on GA media

RHSA-2025:8341 — Red Hat Security Advisory: firefox security update

firefox: thunderbird: Error handling for script execution was incorrectly isolated from web content firefox: thunderbird: Potential local code execution in “Copy as cURL” command firefox: thunderbird: Script element events leaked cross-origin resource status firefox: thunderbird: Clickjacking vulnerability could have led to leaking saved payment card details firefox: thunderbird: Memory safety bugs firefox: thunderbird: Memory safety bug libvpx: Double-free in libvpx encoder

SUSE-SU-2025:21170-1 — Security update for mozjs128

Security update for mozjs128

UBUNTU-CVE-2025-5283

Affected: Ubuntu:Pro:16.04:LTS: libvpx, Ubuntu:Pro:18.04:LTS: libvpx, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: libvpx, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: libvpx, Ubuntu:22.04:LTS: mozjs102, Ubuntu:22.04:LTS: mozjs78 and 5 more

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

WID-SEC-W-2025-1158 — Google Chrome / Microsoft Edge: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Google Chrome / Microsoft Edge ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.