1361 matches found
libvpx:vpx_enc_fuzzer_vp8: Use-of-uninitialized-value in vpx_variance16x16_avx2
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=5299502767734784 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp8 Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
libvpx:vpx_enc_fuzzer_vp8_nalloc: Use-of-uninitialized-value in vp8_regular_quantize_b_sse4_1
Project: https://chromium.googlesource.com/webm/libvpx Detailed Report: https://oss-fuzz.com/testcase?key=4581817557778432 Project: libvpx Fuzzing Engine: libFuzzer Fuzz Target: vpxencfuzzervp8nalloc Job Type: libfuzzermsanlibvpx Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
JLSEC-2026-375
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
JLSEC-2026-376
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above...
PT-2026-39706
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx image t struct may be...
PT-2026-39705
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above...
PT-2026-39704
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2026-014289)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014289 advisory. Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2...
ROS-20260417-73-0011
A vulnerability in the libvpx component of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260417-73-0012
A vulnerability in the libvpx component of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
libvpx security update
1.3.0-8.0.3 - Fixes heap buffer overflow in libvpx CVE-2026-2447 Orabug: 39112729 1.3.0-8.0.1 - Fixes CVE-2025-5283 vpxcodecencinitmulti fix double free on init fail Orabug: 38103810...
Oracle Linux 7 : libvpx (ELSA-2026-5320)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5320 advisory. - Fixes heap buffer overflow in libvpx CVE-2026-2447 Orabug: 39112729 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 9 : thunderbird (RHSA-2026:3516)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3516 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox:...
RHSA-2026:5326 Red Hat Security Advisory: libvpx security update
Bulletin has no description...
RHSA-2026:5323 Red Hat Security Advisory: libvpx security update
Bulletin has no description...
RHSA-2026:5324 Red Hat Security Advisory: libvpx security update
Bulletin has no description...
RHSA-2026:5319 Red Hat Security Advisory: libvpx security update
Bulletin has no description...
RHSA-2026:5320 Red Hat Security Advisory: libvpx security update
Bulletin has no description...