CLSA-2026-1773832252 libvpx: Fix of CVE-2026-2447

CVE-2026-2447: Fix heap buffer overflow in writesuperframeindex...

CLSA-2026-1773830081 libvpx: Fix of CVE-2026-2447

CVE-2026-2447: fix heap buffer overflow in writesuperframeindex...

Oracle Linux 8 : libvpx (ELSA-2026-3967)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-3967 advisory. 1.7.0-13 - Add patch for superframe index full Resolves: RHEL-150334 Tenable has extracted the preceding description block directly from the Oracle Linux securi...

libvpx security update

1.7.0-13 - Add patch for superframe index full Resolves: RHEL-150334...

SUSE CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...

ffmpeg:ffmpeg_BSF_VP9_SUPERFRAME_fuzzer: Heap-buffer-overflow in vp9_superframe_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5173378975137792 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVP9SUPERFRAMEfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

ffmpeg:ffmpeg_BSF_VP9_SUPERFRAME_SPLIT_fuzzer: Heap-buffer-overflow in vp9_superframe_split_filter

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4984270639202304 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegBSFVP9SUPERFRAMESPLITfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libwebm 'ParseVP9SuperFrameIndex' function heap buffer out-of-bounds read and out-of-bounds write vulnerabilities

libwebm is an open source network media file codec library . A security vulnerability in the 'ParseVP9SuperFrameIndex' function in the common/libwebmutil.cc file in libwebm on 2018-01-30 and prior versions stems from the program's failure to validate the childframelength data of .webm files. A...