Electron affected by libvpx's heap buffer overflow in vp8 encoding

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-5217

CVE-2023-5217 is a heap buffer overflow in VP8 encoding in libvpx (affecting Google Chrome before 117.0.5938.132 and libvpx 1.13.1). A crafted HTML page could remotely trigger heap corruption. Multiple connected sources confirm the vulnerability in libvpx/WebP contexts; Apple’s advisory notes CVE...

Ubuntu 18.04 ESM : libwebp vulnerability (USN-6369-2)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-6369-2 advisory. USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the preceding description...

WebM Project WebP Image Library (libwebp) < 1.3.2 Vulnerability

The version of WebM Project WebP Image Library libwebp installed on the remote host is prior to 1.3.2. It is, therefore, affected by a vulnerability: - Heap buffer overflow in libwebp prior to libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a specially crafted...

SUSE: Security Advisory (SUSE-SU-2023:3829-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current mozilla-firefox Vulnerability (SSA:2023-271-01)

The version of mozilla-firefox installed on the remote host is prior to 115.3.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2023-271-01 advisory. - Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a...

Mozilla Firefox ESR < 115.3.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process...

Mozilla Firefox < 118.0.1

The version of Firefox installed on the remote Windows host is prior to 118.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We...

Mozilla Firefox ESR < 115.3.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.3.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the conten...

SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2023:3825-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3825-1 advisory. Update to version 2.41 jscPED-5778: The MIPS port now supports the Sony Interactive Entertainmen...

SUSE SLED15: libwebp-devel / libwebp6 / libwebp6-32bit / libwebpdecoder2 / etc (SUSE-SU-2023:3829-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3829-1 advisory. - CVE-2023-4863: Fixed heap buffer overflow bsc1215231. Tenable has extracted the preceding description...

KLA61042 DoS vulnerability in Mozilla Thunderbird

Heap buffer overflow vulnerability was found in Mozilla Thunderbird. Malicious users can exploit this vulnerability to cause denial of service. Original advisories MFSA2023-44 Exploitation Public exploits exist for this vulnerability. Related products Mozilla-Thunderbird CVE list CVE-2023-5217...

Mozilla Firefox < 118.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 118.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-44 advisory. - Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content...

Security Vulnerability fixed in Firefox 118.0.1, Firefox ESR 115.3.1, Firefox for Android 118.1.0, Firefox Focus for Android 118.1.0, and Thunderbird 115.3.1. — Mozilla

Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild...

SUSE SLES12: libwebp-devel / libwebp5 / libwebp5-32bit / libwebpdecoder1 / etc (SUSE-SU-2023:3794-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3794-1 advisory. - CVE-2023-4863: Fixed a heap buffer overflow bsc1215231. Tenable has extracted the preceding description block directly from the SUSE...

Amazon Linux 2 : djvulibre (ALASMATE-DESKTOP1.X-2023-002)

The version of djvulibre installed on the remote host is prior to 3.5.27-28. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MATE-DESKTOP1.X-2023-002 advisory. A flaw was found in djvulibre-3.5.28 and earlier. An out of bounds write in function DJVU::filterbv via...