PT-2026-39706

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx image t struct may be...

PT-2026-35334

Integer overflow in libaom internal function img alloc helper can lead to heap buffer overflow. This function can be reached via 3 callers: - Calling aom img alloc with a large value of the d w, d h, or align parameter may result in integer overflows in the calculations of buffer sizes and offset...

The vulnerability of the img_alloc_helper() function in the libaom video encoding library allows a hacker to execute arbitrary code.

The vulnerability of the imgallochelper function in the libaom video encoding library is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by sending specially crafted data...