Medium: firefox

Issue Overview: There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpximaget struct may be...

Amazon Linux 2 : firefox (ALASFIREFOX-2024-028)

The version of firefox installed on the remote host is prior to 115.13.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2FIREFOX-2024-028 advisory. There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, d...

Amazon Linux 2 : thunderbird (ALAS-2024-2617)

The version of thunderbird installed on the remote host is prior to 115.12.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2617 advisory. A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured...

Important: firefox

Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 By monitoring the time certain...

Medium: thunderbird

Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 Affected Packages: thunderbird Note:...

Medium: thunderbird

Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 Affected Packages: thunderbird Note:...

USN-6814-1: libvpx vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Xiantong Hou discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service...

openSUSE Security Advisory (SUSE-SU-2024:2409-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20240718-04

A vulnerability in the vpximgalloc function of the libvpx video encoding/decoding library is related to an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code by transmitting specially crafted data A vulnerability in the libvpx video...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libvpx (SUSE-SU-2024:2409-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2409-1 advisory. - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2024:2408-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2408-1 advisory. - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large parameters...

SUSE: Security Advisory (SUSE-SU-2024:2409-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2409-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large parameters bsc1225879. - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size bsc1225403...

SUSE-SU-2024:2408-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large parameters bsc1225879. - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size bsc1225403...

OPENSUSE-SU-2024:14100-1 libvpx-devel-1.14.1-1.1 on GA media

These are all security issues fixed in the libvpx-devel-1.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

Debian: Security Advisory (DLA-3830-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5722-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5722-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 26, 2024 https://www.debian.org/security/faq -...

Debian dsa-5722 : libvpx-dev - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5722 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5722-1 [email protected] https://www.debian.org/security/...