cve-2023-5217-poc

CVE-2023-5217: libvpx VP8 Encoding Heap Overflow PoC CVE-2023-5217 is an in-the-wild exploited libvpx vulnerability that was found by Clément Lecigne of Google's Threat Analysis Group to be targeting Chrome. This repo shows how to trigger CVE-2023-5217 in the browser using the WebCodecs and...

platform_external_libvpx_v1.4.0_CVE-2023-5217

README - 23 March 2015 Welcome to the WebM VP8/VP9 Codec SDK! COMPILING THE APPLICATIONS/LIBRARIES: The build system used is similar to autotools. Building generally consists of "configuring" with your desired build options, then using GNU make to build the application. 1. Prerequisites All x86...

platform_external_libvpx_v1.8.0_CVE-2023-5217

README - 31 January 2019 Welcome to the WebM VP8/VP9 Codec SDK! COMPILING THE APPLICATIONS/LIBRARIES: The build system used is similar to autotools. Building generally consists of "configuring" with your desired build options, then using GNU make to build the application. 1. Prerequisites All x86...

CLEANSTART-2025-OO37028 In libvpx, there is a possible out of bounds read due to a missing bounds check

Security vulnerability affects the libvpx package. In libvpx, there is a possible out of bounds read due to a missing bounds check...

CLEANSTART-2025-FY65799 In libvpx, there is a possible out of bounds read due to a missing bounds check

Security vulnerability affects the libvpx package. In libvpx, there is a possible out of bounds read due to a missing bounds check...

CLEANSTART-2025-DH12967 In libvpx, there is a possible resource exhaustion due to improper input validation

Security vulnerability affects the libvpx package. In libvpx, there is a possible resource exhaustion due to improper input validation...

CLEANSTART-2025-BP39001 In vp8_decode_frame of decodeframe

Security vulnerability affects the libvpx package. In vp8decodeframe of decodeframe...

CLEANSTART-2025-ZJ89229 There exists interger overflows in libvpx in versions prior to 1

Security vulnerability affects the libvpx package. There exists interger overflows in libvpx in versions prior to 1...

Rocky Linux 9.2 [CIQ] Security Update: libvpx / libvpx-devel Multiple Vulnerabilities (ciqsa-2026_1727)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261727 advisory. This advisory aggregates security fixes for the libvpx SRPM in CIQ LTS 9.2. It addresses 7 CVEs: CVE-2023-5217, CVE-2025-5283, CVE-2017-13194,...

libvpx-devel-1.17.0-1.1 on GA media (moderate)

libvpx-devel-1.17.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12106-1 Rating: moderate Cross-References: CVE-2026-2447 CVSS scores: CVE-2026-2447 SUSE : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-2447 SUSE : 9.2 CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:...

TencentOS Server 4: libvpx (TSSA-2026:1177)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1177 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Astra Linux – vulnerability in libvpx

VP9 in libvpx prior to version 1.13.1 mishandles widths, resulting in a crash related to encoding...

OPENSUSE-SU-2026:12106-1 libvpx-devel-1.17.0-1.1 on GA media

These are all security issues fixed in the libvpx-devel-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...

Rocky Linux 10.1 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2026_3517)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263517 advisory. libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bu...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2026_3338)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20263338 advisory. libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox: Invalid pointer in the JavaScript Engine component CVE-2026-2785 firefox: Memory safety bugs...

Rocky Linux 8 [CIQ] Security Update: libvpx / libvpx-debuginfo / libvpx-debugsource / libvpx-devel (crlsa-2026_3967)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263967 advisory. libvpx: Heap buffer overflow in libvpx CVE-2026-2447 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

AlmaLinux 9.6 [TuxCare] Security Update: libvpx / libvpx-devel / libvpx-utils (ALMALINUX9.6:CLSA-2026:1777973407)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777973407 advisory. - There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpximgalloc with a large value of the dw, dh, or align...

Rocky Linux 9 [CIQ] Security Update: libvpx / libvpx-debuginfo / libvpx-debugsource / libvpx-devel (crlsa-2025_9118)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259118 advisory. libvpx: Double-free in libvpx encoder CVE-2025-5283 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...

AlmaLinux 9.6 [TuxCare] Security Update: libvpx / libvpx-devel / libvpx-utils (ALMALINUX9.6:CLSA-2026:1773832252)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773832252 advisory. - Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird...

Rocky Linux 9.6 [TuxCare] Security Update: libvpx / libvpx-devel / libvpx-utils (ALMALINUX9.6:CLSA-2026:1773832252)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1773832252 advisory. - Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird...