openSUSE Security Update : libvpx (openSUSE-2020-105)

This update for libvpx fixes the following issues : - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

Fedora: Security Advisory for libvpx (FEDORA-2020-6cd410d9e4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for libvpx (openSUSE-SU-2020:0105_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libvpx (important)

openSUSE Security Update: Security update for libvpx Announcement ID: openSUSE-SU-2020:0105-1 Rating: important References: 1160611 1160612 1160613 1160614 1160615 Cross-References: CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 Affected Products: openSUSE Leap 15.1 An upda...

OPENSUSE-SU-2020:0105-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

[SECURITY] Fedora 30 Update: libvpx-1.8.2-1.fc30

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...

Out Of Bounds Read

libvpx.so is vulnerable to out of bounds read. The vulnerability exists because it fails to perform bound checking to make sure the allocation of required bitstream size for profile 1 header, causing over read in the function decoderpeeksiinternal in vp9/vp9dxiface.c...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:0143-1)

This update for libvpx fixes the following issues : CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. CVE-2019-9433: Fixed a use-after-fr...

SUSE-SU-2020:0143-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

[SECURITY] Fedora 31 Update: libvpx-1.8.2-1.fc31

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...

Fedora Update for libvpx FEDORA-2020-65eac1b48b

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 31 : libvpx (2020-65eac1b48b)

Update to 1.8.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...

Remote Code Execution

libvpx.so is vulnerable to remote code execution. The ParseContentEncodingEntry function of mkvparser.cc does not reset of a freed pointer. causing a double free memory corruption and subsequently allowing to trigger a remote code execution...

CVE-2019-9371

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254...

CVE-2019-9325

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

CVE-2019-9232

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483...

MGASA-2019-0369 Updated libvpx packages fix security vulnerabilities

Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary cod...

Updated libvpx packages fix security vulnerabilities

Updated libvpx packages fix security vulnerabilities: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary cod...

USN-4199-1: libvpx vulnerabilities | Cloud Foundry

Severity Low Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of servic...