Lucene search
+L

11 matches found

AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•19 views

Astra Linux – Vulnerability in libavif

In libavif before version 1.3.0, the avifImageRGBToYUV function in reformat.c contains integer overflows during multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

6.5CVSS5.5AI score0.00338EPSS
SaveExploits1References2
osv_jlsec
osv_jlsec
•added 2026/04/17 1:07 p.m.•22 views

JLSEC-2026-126 In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications...

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

6.5CVSS5.7AI score0.00338EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2025/09/28 12:00 a.m.•24 views

Libavif Encoding Buffer Overflow DoS

The vulnerability of the avifImageRGBToYUV function in the reformat.c component of the Libavif encoding and decoding library for .avif files is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...

4.5CVSS6.2AI score0.00338EPSS
SaveExploits1References10Affected Software3
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2025-48175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

6.5CVSS5.7AI score0.00338EPSS
SaveExploits1References2
Veracode
Veracode
•added 2025/05/20 5:24 p.m.•20 views

Integer Overflow

libavif is vulnerable to Integer Overflow. The vulnerability is due to integer overflow due to unsafe multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes in the avifImageRGBToYUV function in reformat.c...

6.5CVSS7.3AI score0.00338EPSS
SaveExploits1References5Affected Software1
Snyk
Snyk
•added 2025/05/16 5:43 a.m.•9 views

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to the avifImageRGBToYUV function. An attacker can execute arbitrary code by exploiting the integer overflows in the calculations of rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. Remediation Upgrad...

8.6CVSS7.8AI score0.00338EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2025/05/16 5:15 a.m.•7 views

DEBIAN-CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

6.5CVSS4.8AI score0.00338EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/16 12:00 a.m.•2 views

CVE-2025-48175: Integer Overflow or Wraparound

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

6.5CVSS5.6AI score0.00338EPSS
SaveExploits1References1
Mend
Mend
•added 2025/05/16 12:00 a.m.•5 views

CVE-2025-48175

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...

6.5CVSS0.00338EPSS
SaveExploits1References7
OSS-Fuzz
OSS-Fuzz
•added 2024/02/20 8:05 p.m.•11 views

libavif:[email protected]: Use-of-uninitialized-value in avifImageRGBToYUV

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5160955631697920 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2024/02/20 7:47 p.m.•11 views

libavif:[email protected]: Use-of-uninitialized-value in avifImageRGBToYUV

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4927644015591424 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

5.9AI score
SaveExploits0
Rows per page
Query Builder