Lucene search

K
redosRedosROS-20240619-11
HistoryJun 19, 2024 - 12:00 a.m.

ROS-20240619-11

2024-06-1900:00:00
redos.red-soft.ru
vulnerability
img_alloc_helper
libaom
video encoding
integer overflow
remote execution
arbitrary code
unix

10 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

Vulnerability in img_alloc_helper() function of libaom video encoding library is related to integer
overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute
arbitrary code by transmitting specially crafted data

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64aom<= 3.4.0-2UNKNOWN

10 High

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:H/SI:H/VA:H/SA:H

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%