152 matches found
SUSE SLED15: avif-tools / gdk-pixbuf-loader-libavif / libavif-devel / libavif16 / etc (SUSE-SU-2025:02817-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02817-1 advisory. - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving...
SUSE SLED15 / SLES15 Security Update : libavif (SUSE-SU-2025:02816-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02816-1 advisory. - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes,...
Security update for libavif
This update for libavif fixes the following issues: update to 1.3.0: CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in stream-offset+size...
SUSE-SU-2025:02817-1 Security update for libavif
This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 - CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in...
Security update for libavif
This update for libavif fixes the following issues: update to 1.3.0: CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in stream-offset+size...
SUSE-SU-2025:02816-1 Security update for libavif
This update for libavif fixes the following issues: - update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 - CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in...
Astra Linux – Vulnerability in libavif
In libavif before version 1.3.0, the avifImageRGBToYUV function in reformat.c contains integer overflows during multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...
Astra Linux – Vulnerability in libavif
In libavif before version 1.3.0, the makeRoom function in stream.c has an integer overflow, resulting in a buffer overflow at stream-offset+size...
Debian: Security Advisory (DSA-5930-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 5930-1] libavif security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5930-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 29, 2025 https://www.debian.org/security/faq -...
Debian dsa-5930 : libavif-bin - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5930 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5930-1 [email protected] https://www.debian.org/securit...
DSA-5930-1 libavif - security update
Bulletin has no description...
[SECURITY] [DLA 4179-1] libavif security update
Debian LTS Advisory DLA-4179-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara May 26, 2025 https://wiki.debian.org/LTS Package : libavif Version : 0.8.4-2+deb11u2 CVE ID : CVE-2025-48174 CVE-2025-48175 Debian Bug : 1105883 1105885 Multiple...
Debian dla-4179 : libavif-bin - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4179 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4179-1 [email protected]...
Debian: Security Advisory (DLA-4179-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-4179-1 libavif - security update
Bulletin has no description...
Integer Overflow
libavif is vulnerable to Integer Overflow. The vulnerability is due to integer overflow due to unsafe multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes in the avifImageRGBToYUV function in reformat.c...
Buffer Overflow
libavif is vulnerable to Buffer Overflow. The vulnerability is due to integer overflow due to improper bounds checking when calculating stream-offset + size in makeRoom in stream.c, which can lead to a buffer overflow...
