MiracleLinux 8 : libvpx-1.7.0-10.el8.ML.1 (AXSA:2023-6495:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6495:02 advisory. libvpx: Heap buffer overflow in vp8 encoding in libvpx CVE-2023-5217 libvpx: crash related to VP9 encoding in libvpx CVE-2023-44488 Tenable has...

Debian dla-4440 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4440 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4440-1 [email protected]...

OSV-2026-55 Use-of-uninitialized-value in vp9_quantize_fp_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475583924 Crash type: Use-of-uninitialized-value Crash state: vp9quantizefpavx2 blockyrd vp9pickintermode...

OSV-2026-30 Use-of-uninitialized-value in vp9_quantize_fp_avx2

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=474614578 Crash type: Use-of-uninitialized-value Crash state: vp9quantizefpavx2 blockyrd vp9pickintermode...

EUVD-2021-18839

Malware in sbrugna...

EUVD-2015-4526

Malware in sbrugna...

EUVD-2015-1399

Malware in sbrugna...

EUVD-2017-2713

Malware in sbrugna...

EUVD-2021-15142

Malware in sbrugna...

EUVD-2023-58590

Malicious code in bioql PyPI...

EUVD-2023-40792

Malicious code in bioql PyPI...

EUVD-2022-29333

Malicious code in bioql PyPI...

EUVD-2023-48823

Malicious code in bioql PyPI...

EUVD-2022-29382

Malicious code in bioql PyPI...

EUVD-2022-27852

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2018-6548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame would not be changed...

Amazon Linux 2 : libvpx (ALAS-2025-2960)

The version of libvpx installed on the remote host is prior to 1.9.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2960 advisory. VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 A heap overflow...

[SECURITY] Fedora 41 Update: libvpx-1.15.0-3.fc41

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applicati ons with the VP8 and VP9 video codecs, high quality, royalty free, open source co decs deployed on millions of computers and devices worldwide...

[SECURITY] Fedora 42 Update: libvpx-1.15.0-3.fc42

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applicati ons with the VP8 and VP9 video codecs, high quality, royalty free, open source co decs deployed on millions of computers and devices worldwide...

Microsoft VP9 Video Extensions RCE Vulnerability (Jun 2025) - Windows

Microsoft VP9 Video Extensions is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...