CVE-2024-5197 Integer overflow in libvpx

2024-06-0313:30:26

CWE-190

Google

github.com

cve-2024-5197

libvpx

integer overflow

CVSS4

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:chromium:libvpx:*:*:*:*:*:*:*:*"
    ],
    "vendor": "chromium",
    "product": "libvpx",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.14.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]