Out Of Bounds Read

libvpx.so is vulnerable to out of bounds read. The vulnerability exists because it fails to perform bound checking to make sure the allocation of required bitstream size for profile 1 header, causing over read in the function decoderpeeksiinternal in vp9/vp9dxiface.c...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:0143-1)

This update for libvpx fixes the following issues : CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. CVE-2019-9433: Fixed a use-after-fr...

SUSE-SU-2020:0143-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

[SECURITY] Fedora 31 Update: libvpx-1.8.2-1.fc31

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...

Fedora Update for libvpx FEDORA-2020-65eac1b48b

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : libvpx (2020-65eac1b48b)

Update to 1.8.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...

Remote Code Execution

libvpx.so is vulnerable to remote code execution. The ParseContentEncodingEntry function of mkvparser.cc does not reset of a freed pointer. causing a double free memory corruption and subsequently allowing to trigger a remote code execution...

CVE-2019-9371

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254...

CVE-2019-9325

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9232

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483...

Updated libvpx packages fix security vulnerabilities

Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary cod...

MGASA-2019-0369 Updated libvpx packages fix security vulnerabilities

Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary cod...

USN-4199-1: libvpx vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of servic...

Debian DSA-4578-1 : libvpx - security update

Multiple security issues were found in libvpx multimedia library which could result in denial of service and potentially the execution of arbitrary code if malformed WebM files are processed. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted fr...

Debian: Security Advisory (DSA-4578-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4578-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4578-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 28, 2019 https://www.debian.org/security/faq -...

DSA-4578-1 libvpx - security update

Bulletin has no description...

Debian DLA-2012-1 : libvpx security update

Several issues have been found in libvpx, a VP8 and VP9 video codec. CVE-2019-9232 There is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Debian: Security Advisory (DLA-2012-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...