EUVD-2026-38046

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...

CVE-2026-56210

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...

EUVD-2026-38045

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing LAP mode causes the first-pass stats ring buffer wrap-around guard to be bypassed when glaginframes is set to 1 or higher. This results in a 232-byte...

Astra Linux – Vulnerability in aom

The file aomdsp/noisemodel.c in the libaom library within AOMedia, dated before March 24, 2021, contains a buffer overflow vulnerability...

Astra Linux – Vulnerability in aom

aomimage.c in libaom in AOMedia before 2021-04-07 releases memory that is not located in the heap...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, caused by an error in calculating the buffer size for AV1 block information. This vulnerability may lead to the...

UBUNTU-CVE-2026-30997

An out-of-bounds read in the readglobalparam function libavcodec/av1dec.c of FFmpeg v8.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2023-43325

Malicious code in bioql PyPI...

USN-7397-1 aom vulnerability

Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

libaom security breach

libaom is a software application. A reference codec for the AOMedia Video 1 format. A security vulnerability exists in libaom that stems from an integer overflow in the imgallochelper function of the libaom library...

AOMedia Buffer Error Vulnerability

AOMedia is a next-generation open source digital media technology for everyone from the AOMedia organization. AOMedia versions prior to v3.7.1 suffer from a buffer error vulnerability that stems from the fact that increasing the resolution of a video frame while performing multi-threaded encoding...

The vulnerability of the aom_dsp/noise_model.c component in the library, which implements the AV1 codec, in the Debian GNU/Linux operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the aomdsp/noisemodel.c component in the library that implements the AV1 codec in the Debian GNU/Linux operating system is caused by buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

DEBIAN-CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

Design/Logic Flaw

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

UBUNTU-CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

CVE-2023-39616

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assignframebufferp in av1/common/av1commonint.h...

PT-2023-27034 · Aomedia +1 · Aomedia +1

Name of the Vulnerable Software and Affected Versions: AOMedia versions 3.0.0 through 3.5.0 Description: The issue is related to an invalid read memory access via the component assign frame buffer p in av1/common/av1 common int.h. This component is part of the AOMedia library. Recommendations: Fo...