Medium: thunderbird

Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 Affected Packages: thunderbird Note:...

Medium: thunderbird

Issue Overview: A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above CVE-2023-6349 Affected Packages: thunderbird Note:...

USN-6814-1: libvpx vulnerability | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description Xiantong Hou discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service...

openSUSE Security Advisory (SUSE-SU-2024:2409-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20240718-04

A vulnerability in the vpximgalloc function of the libvpx video encoding/decoding library is related to an integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely, execute arbitrary code by transmitting specially crafted data A vulnerability in the libvpx video...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libvpx (SUSE-SU-2024:2409-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2409-1 advisory. - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2024:2408-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2408-1 advisory. - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large parameters...

SUSE: Security Advisory (SUSE-SU-2024:2409-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:2409-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large parameters bsc1225879. - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size bsc1225403...

SUSE-SU-2024:2408-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2024-5197: Fixed interger overflow when calling vpximgalloc or vpximgwrap with large parameters bsc1225879. - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally configured size bsc1225403...

OPENSUSE-SU-2024:14100-1 libvpx-devel-1.14.1-1.1 on GA media

These are all security issues fixed in the libvpx-devel-1.14.1-1.1 package on the GA media of openSUSE Tumbleweed...

Debian: Security Advisory (DLA-3830-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-5722-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5722-1] libvpx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5722-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 26, 2024 https://www.debian.org/security/faq -...

Debian dsa-5722 : libvpx-dev - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5722 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5722-1 [email protected] https://www.debian.org/security/...

DSA-5722-1 libvpx - security update

Bulletin has no description...

Mageia: Security Advisory (MGASA-2024-0221)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3830-1] libvpx security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3830-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 16, 2024 https://wiki.debian.org/LTS -...

Debian dla-3830 : libvpx-dev - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3830 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3830-1 [email protected] https://www.debian.org/lts/security/...