1232 matches found
Unity Linux 20.1070e Security Update: libvpx (UTSA-2025-984702)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984702 advisory. Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
Unity Linux 20.1070a Security Update: firefox (UTSA-2025-987432)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987432 advisory. Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
RockyLinux 10 : libvpx (RLSA-2025:9120)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9120 advisory. libvpx: Double-free in libvpx encoder CVE-2025-5283 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note th...
libvpx security update
An update is available for libvpx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvpx packages provide the VP8 SDK, which allows the encoding and decodin...
RLSA-2025:9118 Important: libvpx security update
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double-free in libvpx encoder CVE-2025-5283 For more details about the security issues, including the impac...
RockyLinux 9 : libvpx (RLSA-2025:9118)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9118 advisory. libvpx: Double-free in libvpx encoder CVE-2025-5283 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note tha...
EUVD-2023-58590
Malicious code in bioql PyPI...
EUVD-2023-2578
Malicious code in bioql PyPI...
EUVD-2025-16294
Malicious code in bioql PyPI...
EUVD-2024-46440
Malicious code in bioql PyPI...
EUVD-2023-48823
Malicious code in bioql PyPI...
libvpx security update
An update is available for libvpx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvpx packages provide the VP8 SDK, which allows the encoding and decodi...
RLSA-2025:9120 Important: libvpx security update
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double-free in libvpx encoder CVE-2025-5283 For more details about the security issues, including the impac...
Amazon Linux 2023 : libvpx, libvpx-devel, libvpx-utils (ALAS2023-2025-1207)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1207 advisory. A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.We recommend...
Amazon Linux 2 : libvpx, --advisory ALAS2-2025-3015 (ALAS-2025-3015)
The version of libvpx installed on the remote host is prior to 1.9.0-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3015 advisory. There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or alig...
Medium: libvpx
Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 There exists interger overflows in...
GLSA-202509-07 : libvpx: Use after free
The remote host is affected by the vulnerability described in GLSA-202509-07 libvpx: Use after free A vulnerability has been discovered in libvpx. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...
libvpx: Use after free
Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description A vulnerability has been discovered in libvpx. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier f...
Advisory ROSA-SA-2025-2998
software: libvpx 1.10.0 OS: ROSA-CHROME unaffected versions = libvpx-1.10.0-5 affected versions libvpx-1.10.0-5 CVE-ID: CVE-2024-5197 BDU-ID: 2024-04531 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the vpximgalloc function of the libvpx video encoding/decoding library is related to integer...