The vulnerability of the multimedia library libvpx, related to reading beyond the buffer boundaries of memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the multimedia library libvpx is related to a memory-bound read error. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

The vulnerability of the multimedia library libvpx, related to insufficient validation of input data, allows attackers to gain access to confidential information.

The vulnerability of the multimedia library libvpx is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Arbitrary Code Execution

libvpx is vulnerable to arbitrary code execution. An integer overflow flaw, leading to arbitrary memory writes, was found in libvpx. An attacker could create a specially-crafted video encoded using the VP8 codec that, when played by a victim with an application using libvpx such as Totem, would...

GLSA-202003-59 : libvpx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-59 libvpx: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

libvpx: User-assisted execution of arbitrary code

Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a...

Debian DLA-2136-1 : libvpx security update

It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 'Jessie', this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommend that you upgrade your libvpx packages. NOTE: Tenable Network...

Debian: Security Advisory (DLA-2136-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2136-1] libvpx security update

Package : libvpx Version : 1.3.0-3+deb8u3 CVE ID : CVE-2020-0034 It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 "Jessie", this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommen...

DLA-2136-1 libvpx - security update

Bulletin has no description...

SUSE SLES12 Security Update : libvpx (SUSE-SU-2020:0459-1)

This update for libvpx fixes the following issues : CVE-2019-9232: Fixed an out of bound memory access bsc1160613. CVE-2019-9433: Fixdd a use-after-free in vp8deblock bsc1160614. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2020:0459-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-9232: Fixed an out of bound memory access bsc1160613. - CVE-2019-9433: Fixdd a use-after-free in vp8deblock bsc1160614...

EulerOS 2.0 SP8 : libvpx (EulerOS-SA-2020-1185)

According to the version of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open...

Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2020-1185)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : libvpx (openSUSE-2020-105)

This update for libvpx fixes the following issues : - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

Fedora 30 : libvpx (2020-6cd410d9e4)

Update to 1.8.2. Fixes several security vulnerabilities: CVE-2019-9232, CVE 2019-9433, CVE-2019-9325, CVE-2019-9371, CVE-2019-2126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automaticall...

openSUSE: Security Advisory for libvpx (openSUSE-SU-2020:0105_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libvpx (FEDORA-2020-6cd410d9e4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libvpx (important)

openSUSE Security Update: Security update for libvpx Announcement ID: openSUSE-SU-2020:0105-1 Rating: important References: 1160611 1160612 1160613 1160614 1160615 Cross-References: CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 Affected Products: openSUSE Leap 15.1 An upda...

OPENSUSE-SU-2020:0105-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

[SECURITY] Fedora 30 Update: libvpx-1.8.2-1.fc30

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...