Lucene search
+L

44 matches found

RedHat Linux
RedHat Linux
added 2023/10/04 11:56 a.m.6 views

libvpx: Heap buffer overflow in vp8 encoding in libvpx

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

8.8CVSS7.8AI score0.49013EPSS
SaveExploits3References6
RedHat Linux
RedHat Linux
added 2023/10/04 11:50 a.m.8 views

libvpx: Heap buffer overflow in vp8 encoding in libvpx

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

8.8CVSS7.8AI score0.49013EPSS
SaveExploits3References6
RedHat Linux
RedHat Linux
added 2023/10/04 11:38 a.m.8 views

libvpx: Heap buffer overflow in vp8 encoding in libvpx

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

8.8CVSS7.8AI score0.49013EPSS
SaveExploits3References6
Tenable Nessus
Tenable Nessus
added 2023/10/04 12:0 a.m.68 views

GLSA-202310-04 : libvpx: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-04 libvpx: Multiple Vulnerabilities - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted...

8.8CVSS8.4AI score0.49013EPSS
SaveExploits3References5
Veracode
Veracode
added 2023/10/02 7:10 p.m.41 views

Heap Buffer Overflow

Google Chrome is vulnerable to Heap Buffer Overflow. The vulnerability exists in the vp8 encoding in libvpx in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

8.8CVSS6.8AI score0.49013EPSS
SaveExploits3References55Affected Software8
CISA KEV Catalog
CISA KEV Catalog
added 2023/10/02 12:0 a.m.212 views

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome...

8.8CVSS9.3AI score0.49013EPSS
SaveIn wildExploits3
Tenable Nessus
Tenable Nessus
added 2023/09/30 12:0 a.m.30 views

Debian DSA-5509-1 : firefox-esr - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5509 advisory. A buffer overflow in VP8 media stream processing has been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code. For...

8.8CVSS8.6AI score0.49013EPSS
SaveExploits3References6
Microsoft CVE
Microsoft CVE
added 2023/09/29 4:24 p.m.61 views

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-5217 exists in the wild...

8.8CVSS9.1AI score0.49013EPSS
SaveExploits3
Malwarebytes
Malwarebytes
added 2023/09/29 11:15 a.m.52 views

Update Chrome now! Google patches another actively exploited vulnerability

Google has updated the Stable Channel for Chrome to 117.0.5938.132 for Windows, Mac and Linux. This update includes ten security fixes. According to Google there is an active exploit for one of the patched vulnerabilities, which means cybercriminals are aware of the vulnerability and are using it...

6.8CVSS7.1AI score0.49013EPSS
SaveExploits3
UbuntuCve
UbuntuCve
added 2023/09/29 12:0 a.m.42 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.3AI score0.49013EPSS
SaveExploits3References15
Tenable Nessus
Tenable Nessus
added 2023/09/29 12:0 a.m.21 views

FreeBSD : electron{22,24,25} -- Heap buffer overflow in vp8 encoding in libvpx (2bcd6ba4-d8e2-42e5-9033-b50b722821fb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2bcd6ba4-d8e2-42e5-9033-b50b722821fb advisory. - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx...

8.8CVSS8.3AI score0.49013EPSS
SaveExploits3References3
OSV
OSV
added 2023/09/29 12:0 a.m.10 views

UBUNTU-CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.1AI score0.49013EPSS
SaveExploits3References16
Github Security Blog
Github Security Blog
added 2023/09/28 6:30 p.m.33 views

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.9AI score0.49013EPSS
SaveExploits3References64Affected Software1
Prion
Prion
added 2023/09/28 4:15 p.m.26 views

Heap overflow

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS9.1AI score0.49013EPSS
SaveExploits3References52Affected Software11
Debian CVE
Debian CVE
added 2023/09/28 3:23 p.m.93 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS10AI score0.49013EPSS
SaveExploits3
AlpineLinux
AlpineLinux
added 2023/09/28 3:23 p.m.73 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.4AI score0.49013EPSS
SaveExploits3
Cvelist
Cvelist
added 2023/09/28 3:23 p.m.50 views

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.1AI score0.49013EPSS
SaveExploits3References52
OSV
OSV
added 2023/09/28 11:6 a.m.8 views

OESA-2023-1685 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop...

7.5CVSS8.8AI score0.00952EPSS
SaveExploits0References2
Snyk
Snyk
added 2023/09/28 7:44 a.m.4 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common.NETCore to version 117.2.20 or higher. References - Chrome Releases - GitHub Commit - GitHub Commit - GitHub PR - GitHub PR - GitHub PR - GitHub P...

8.8CVSS8.7AI score0.49013EPSS
SaveExploits3References2
Snyk
Snyk
added 2023/09/28 7:44 a.m.5 views

Heap-based Buffer Overflow

Overview CefSharp.Common is a the CefSharp Chromium-based browser component 'Core' and common 'Element' components, needed by both WPF and WinForms. Affected versions of this package are vulnerable to Heap-based Buffer Overflow in vp8 encoding in libvpx. Remediation Upgrade CefSharp.Common to...

8.8CVSS9.2AI score0.49013EPSS
SaveExploits3References2
Rows per page
Query Builder