SUSE-SU-2020:0459-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-9232: Fixed an out of bound memory access bsc1160613. - CVE-2019-9433: Fixdd a use-after-free in vp8deblock bsc1160614...

EulerOS 2.0 SP8 : libvpx (EulerOS-SA-2020-1185)

According to the version of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open...

Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2020-1185)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 30 : libvpx (2020-6cd410d9e4)

Update to 1.8.2. Fixes several security vulnerabilities: CVE-2019-9232, CVE 2019-9433, CVE-2019-9325, CVE-2019-9371, CVE-2019-2126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automaticall...

openSUSE: Security Advisory for libvpx (openSUSE-SU-2020:0105_1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for libvpx (FEDORA-2020-6cd410d9e4)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : libvpx (openSUSE-2020-105)

This update for libvpx fixes the following issues : - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

Security update for libvpx (important)

openSUSE Security Update: Security update for libvpx Announcement ID: openSUSE-SU-2020:0105-1 Rating: important References: 1160611 1160612 1160613 1160614 1160615 Cross-References: CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 Affected Products: openSUSE Leap 15.1 An upda...

OPENSUSE-SU-2020:0105-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

[SECURITY] Fedora 30 Update: libvpx-1.8.2-1.fc30

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...

Out Of Bounds Read

libvpx.so is vulnerable to out of bounds read. The vulnerability exists because it fails to perform bound checking to make sure the allocation of required bitstream size for profile 1 header, causing over read in the function decoderpeeksiinternal in vp9/vp9dxiface.c...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:0143-1)

This update for libvpx fixes the following issues : CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. CVE-2019-9433: Fixed a use-after-fr...

SUSE-SU-2020:0143-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry bsc1160611. - CVE-2019-9325: Fixed an out-of-bounds read bsc1160612. - CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data bsc1160613. - CVE-2019-9433: Fixed a...

[SECURITY] Fedora 31 Update: libvpx-1.8.2-1.fc31

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applica tions with the VP8 and VP9 video codecs, high quality, royalty free, open source codecs deployed on millions of computers and devices worldwide...

Fedora 31 : libvpx (2020-65eac1b48b)

Update to 1.8.2 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. T...

Fedora Update for libvpx FEDORA-2020-65eac1b48b

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Remote Code Execution

libvpx.so is vulnerable to remote code execution. The ParseContentEncodingEntry function of mkvparser.cc does not reset of a freed pointer. causing a double free memory corruption and subsequently allowing to trigger a remote code execution...

CVE-2019-9371

In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254...

CVE-2019-9325

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302...

CVE-2019-9433

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...