183 matches found
[SECURITY] Fedora 45 Update: libavif-1.3.0-7.fc45
This library aims to be a friendly, portable C implementation of the AV1 Image File Format, as described here: https://aomediacodec.github.io/av1-avif/...
Astra Linux – Vulnerability in Chromium
The use of after free in libavif in Google Chrome before version 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption through a crafted avif file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after free in libavif in Google Chrome before version 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption through a crafted avif file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Using “after free” in the libavif library in Google Chrome before version 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption through a crafted image file. Chromium security severity: High...
NewStart CGSL MAIN 7.02 : libavif Vulnerability (NS-SA-2026-0091)
The remote NewStart CGSL host, running version MAIN 7.02, has libavif packages installed that are affected by a vulnerability: - In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size. CVE-2025-48174 Note that Nessus has not teste...
libavif:[email protected]: Heap-buffer-overflow in aom_stop_encode
Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5288434888671232 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibavif Platform Id: linux Crash...
JLSEC-2026-126 In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications...
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...
JLSEC-2026-125 In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow...
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...
libavif:[email protected]: Use-of-uninitialized-value in avifDecoderFindGainMapItem
Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=5025760432947200 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...
Mageia: Security Advisory (MGASA-2025-0257)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated libavif packages fix security vulnerabilities
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size. CVE-2025-48174 In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...
MGASA-2025-0257 Updated libavif packages fix security vulnerabilities
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size. CVE-2025-48174 In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes...
EUVD-2020-23935
Malware in sbrugna...
EUVD-2025-15404
Malicious code in bioql PyPI...
EUVD-2025-15403
Malicious code in bioql PyPI...
Libavif Encoding Buffer Overflow DoS
The vulnerability of the avifImageRGBToYUV function in the reformat.c component of the Libavif encoding and decoding library for .avif files is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...
Libavif makeRoom() Component Data Compromise
The vulnerability of the makeRoom function in the stream.c component of the Libavif file encoding and decoding library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...
SUSE SLES15 Security Update : libavif (SUSE-SU-2025:03237-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03237-1 advisory. Update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and...
Security update for libavif
This update for libavif fixes the following issues: Update to 1.3.0: CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in stream-offset+size...
SUSE-SU-2025:03237-1 Security update for libavif
This update for libavif fixes the following issues: Update to 1.3.0: - CVE-2025-48175: Fixed an integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. bsc1243270 - CVE-2025-48174: Fixed an integer overflow and resultant buffer overflow in...