1361 matches found
libvpx:vpx_enc_fuzzer_vp9_nalloc: Use-of-uninitialized-value in vp9_quantize_fp_avx2
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5346484949417984 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
libvpx:vpx_enc_fuzzer_vp9_nalloc: Use-of-uninitialized-value in vpx_variance32x32_avx2
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=6420255019958272 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
libvpx:vpx_enc_fuzzer_vp9_nalloc: Use-of-uninitialized-value in vpx_variance64x64_avx2
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=6470101907079168 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
PT-2026-8351
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 147.0.4 Firefox ESR versions prior to 140.7.1 Firefox ESR versions prior to 115.32.1 Thunderbird versions prior to 140.7.2 Thunderbird versions prior to 147.0.2 Description A heap buffer overflow exists in the libvpx...
libvpx:vpx_enc_fuzzer_vp9: Use-of-uninitialized-value in vp9_diamond_search_sad_c
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=4641403482472448 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
libvpx:vpx_enc_fuzzer_vp8_nalloc: Use-of-uninitialized-value in vp8_diamond_search_sadx4
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=6239678992023552 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp8nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
libvpx:vpx_enc_fuzzer_vp9: Use-of-uninitialized-value in vpx_variance32x32_avx2
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=4939003108589568 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp9 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libvpx (UTSA-2025-991234)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991234 advisory. Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...
libvpx:vpx_dec_fuzzer_vp8: Use-of-uninitialized-value in vp8_multiframe_quality_enhance
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5346190351990784 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxdecfuzzervp8 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
TencentOS Server 4: thunderbird (TSSA-2025:0621)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0621 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
MGASA-2025-0266 Updated libvpx packages fix security vulnerability
Double-free in libvpx encoder. CVE-2025-5283...
Updated libvpx packages fix security vulnerability
Double-free in libvpx encoder. CVE-2025-5283...
Mageia: Security Advisory (MGASA-2025-0266)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Astra Linux – Vulnerabilities in Chromium, Firefox, Thunderbird, and LibVpx
The use of after free in libvpx in Google Chrome before version 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Fedora: Security Advisory (FEDORA-2025-8d38482143)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: thunderbird
Issue Overview: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpximaget struct may be...
AlmaLinux 10 : libvpx (ALSA-2025:9120)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9120 advisory. libvpx: Double-free in libvpx encoder CVE-2025-5283 Tenable has extracted the preceding description block directly from the AlmaLinux security advisory. Note that...
EUVD-2017-4711
Malware in sbrugna...