Veracode Vulnerability DatabaseVERACODE:22582Out Of Bounds Read (OOB)
EPSS
Percentile
84.5%
libvpx.so is vulnerable to out-of-bounds read (OOB). The vulnerability is caused due to lack of bound checking for fuzzed data index in vp8_norm table, leading to an out of bounds read.
References
lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html
www.openwall.com/lists/oss-security/2019/10/25/17
www.openwall.com/lists/oss-security/2019/10/27/1
www.openwall.com/lists/oss-security/2019/11/07/1
bugzilla.suse.com/show_bug.cgi?id=1160613
github.com/webmproject/libvpx/commit/46e17f0cb4a80b36755c84b8bf15731d3386c08f
lists.debian.org/debian-lts-announce/2019/11/msg00030.html
lists.fedoraproject.org/archives/list/[email protected]/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/
lists.fedoraproject.org/archives/list/[email protected]/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/
seclists.org/bugtraq/2019/Nov/43
security.gentoo.org/glsa/202003-59
source.android.com/security/bulletin/android-10
usn.ubuntu.com/4199-1/
usn.ubuntu.com/4199-2/
www.debian.org/security/2019/dsa-4578
Related
