RockyLinux 9 : libvpx (RLSA-2025:9118)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9118 advisory. libvpx: Double-free in libvpx encoder CVE-2025-5283 Tenable has extracted the preceding description block directly from the RockyLinux security advisory. Note tha...

EUVD-2023-58590

Malicious code in bioql PyPI...

EUVD-2023-2578

Malicious code in bioql PyPI...

EUVD-2023-48823

Malicious code in bioql PyPI...

EUVD-2024-46440

Malicious code in bioql PyPI...

EUVD-2025-16294

Malicious code in bioql PyPI...

RLSA-2025:9120 Important: libvpx security update

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Double-free in libvpx encoder CVE-2025-5283 For more details about the security issues, including the impac...

libvpx security update

An update is available for libvpx. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvpx packages provide the VP8 SDK, which allows the encoding and decodi...

Amazon Linux 2023 : libvpx, libvpx-devel, libvpx-utils (ALAS2023-2025-1207)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1207 advisory. A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.We recommend...

Amazon Linux 2 : libvpx, --advisory ALAS2-2025-3015 (ALAS-2025-3015)

The version of libvpx installed on the remote host is prior to 1.9.0-5. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3015 advisory. There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or alig...

Medium: libvpx

Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 There exists interger overflows in...

GLSA-202509-07 : libvpx: Use after free

The remote host is affected by the vulnerability described in GLSA-202509-07 libvpx: Use after free A vulnerability has been discovered in libvpx. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

libvpx: Use after free

Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description A vulnerability has been discovered in libvpx. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier f...

Advisory ROSA-SA-2025-2998

software: libvpx 1.10.0 OS: ROSA-CHROME unaffected versions = libvpx-1.10.0-5 affected versions libvpx-1.10.0-5 CVE-ID: CVE-2024-5197 BDU-ID: 2024-04531 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the vpximgalloc function of the libvpx video encoding/decoding library is related to integer...

CLSA-2025-1756928514 libvpx: Fix of CVE-2025-5283

CVE-2025-5283: fix use after free vulnerability in libvpx to prevent potential heap corruption via crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2016-6712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01...

Linux Distros Unpatched Vulnerability : CVE-2017-0393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This...

Linux Distros Unpatched Vulnerability : CVE-2016-3881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The decoderpeeksiinternal function in vp9/vp9dxiface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before...

Linux Distros Unpatched Vulnerability : CVE-2016-6711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01...

Linux Distros Unpatched Vulnerability : CVE-2016-2464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execu...