1238 matches found
cve-2023-5217-poc
CVE-2023-5217: libvpx VP8 인코딩 힙 오버플로우 PoC CVE-2023-5217은 야생에서 악용된 libvpx 취약점으로, Google 위협 분석 그룹Threat Analysis Group의 Clément Lecigne에 의해 Chrome을 대상으로 하는 것으로 발견되었습니다. 이 저장소는 WebCodecs 및 MediaRecorder API를 사용하여 브라우저에서 CVE-2023-5217을 트리거하는 방법을 보여줍니다. CVE-2023-5217은 제어 가능한 오버플로우 길이와 반복되는 작은 4바이트 값의...
platform_external_libvpx_v1.4.0_CVE-2023-5217
README - 2015년 3월 23일 WebM VP8/VP9 코덱 SDK에 오신 것을 환영합니다! 애플리케이션/라이브러리 컴파일: 사용된 빌드 시스템은 autotools와 유사합니다. 일반적으로 빌드는 원하는 빌드 옵션으로 "구성한 후" GNU make를 사용하여 애플리케이션을 빌드하는 것으로 구성됩니다. 1. 전제 조건 root@kitploit: 모든 x86 대상에는 Yasm1 어셈블러가 설치되어 있어야 합니다. root@kitploit: 모든 Windows 빌드에는 Cygwin2이 설치되어 있어야 합니다. 문서를 빌드하려...
platform_external_libvpx_v1.8.0_CVE-2023-5217
README - 31 января 2019 Добро пожаловать в SDK кодеков WebM VP8/VP9! КОМПИЛЯЦИЯ ПРИЛОЖЕНИЙ/БИБЛИОТЕК: Используемая система сборки аналогична autotools. Сборка обычно состоит из "настройки" с желаемыми опциями сборки, а затем использования GNU make для сборки приложения. 1. Предварительные...
OPENSUSE-SU-2026:20183-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 144.0.7559.132 boo1257650 CVE-2026-1861: Heap buffer overflow in libvpx in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Astra Linux – Vulnerability in libvpx
In libvpx version VP9 before 1.13.1, handling of widths is incorrect, resulting in a crash related to encoding...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in the libvpx component in Google Chrome prior to version 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerabilities in libvpx, chromium, firefox, thunderbird
The use of after free in libvpx in Google Chrome before version 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerabilities in Firefox, LibVpx, Thunderbird
Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, Chromium, and LibVpx
A heap buffer overflow occurred in the vp8 encoding process in libvpx within Google Chrome before version 117.0.5938.132. In version 1.13.1 of libvpx, a remote attacker could potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: firefox (UTSA-2026-101320)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101320 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: thunderbird (UTSA-2026-101131)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101131 advisory. Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird...
JLSEC-2026-375
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
JLSEC-2026-376
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvpx (UTSA-2026-014289)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014289 advisory. Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2...
ROS-20260417-73-0012
A vulnerability in the libvpx component of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260417-73-0011
A vulnerability in the libvpx component of Mozilla Firefox, Firefox ESR and Thunderbird email client is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
libvpx security update
1.3.0-8.0.3 - Fixes heap buffer overflow in libvpx CVE-2026-2447 Orabug: 39112729 1.3.0-8.0.1 - Fixes CVE-2025-5283 vpxcodecencinitmulti fix double free on init fail Orabug: 38103810...
Oracle Linux 7 : libvpx (ELSA-2026-5320)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-5320 advisory. - Fixes heap buffer overflow in libvpx CVE-2026-2447 Orabug: 39112729 Tenable has extracted the preceding description block directly from the Oracle Linux...
RHEL 9 : thunderbird (RHSA-2026:3516)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:3516 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: libvpx: Heap buffer overflow in libvpx CVE-2026-2447 firefox:...