Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : libvpx vulnerabilities (USN-6403-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6403-1 advisory. It was discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a speciall...

[SECURITY] Fedora 38 Update: libvpx-1.13.0-5.fc38

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applicati ons with the VP8 and VP9 video codecs, high quality, royalty free, open source co decs deployed on millions of computers and devices worldwide...

[slackware-security] libvpx

New libvpx packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libvpx-1.12.0-i586-1slack15.0.txz: Upgraded. This release contains two security related fixes -- one each for VP8 and VP9. For more...

CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...

DEBIAN-CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...

CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...

CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...

CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding...

PT-2023-5682 · Libvpx +9 · Libvpx +9

Name of the Vulnerable Software and Affected Versions: libvpx versions prior to 1.13.1 Description: The issue is related to the mishandling of widths in the VP9 codec of the libvpx library, leading to a crash related to encoding. This can be exploited by a remote attacker using a specially crafte...

CVE-2023-5217

A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...

OSV-2023-844 Heap-buffer-overflow in Video::VP9::Decoder::create_video_frame

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62307 Crash type: Heap-buffer-overflow READ Crash state: Video::VP9::Decoder::createvideoframe Video::VP9::Decoder::decodeframe Video::VP9::Decoder::receivesample...

PT-2023-36009 · Libvp9 · Libvp9

Name of the Vulnerable Software and Affected Versions: libvp9 affected versions not specified Description: The issue is related to a heap-buffer-overflow read in the libvp9 library. The crash occurs in the Video::VP9::Decoder module, specifically in the create video frame, decode frame, and recei...

Security Updates for Microsoft Windows VP9 Video Extensions Library (July 2023)

The Windows 'VP9 Extensions' app installed on the remote host is affected by an information disclosure vulnerability. An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory. Exploitation of the vulnerability requires that an attacker must se...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872

VP9 Video Extensions Information Disclosure Vulnerability...

Information disclosure

VP9 Video Extensions Information Disclosure Vulnerability...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872 VP9 Video Extensions Information Disclosure Vulnerability

...

CVE-2023-36872

CVE-2023-36872 refers to an information-disclosure flaw in the Microsoft Windows VP9 Video Extensions library. Public sources in the connected set describe the vulnerability as allowing an attacker to read small portions of heap memory when a user opens a specially crafted file, requiring user in...