Skip to content
OpenAdvisories
Medium DLA-3830-1 1 CVE

libvpx - security update

Published Jun 16, 2024 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libvpx 1.7.0-3+deb10u3

Vulnerabilities 1

  • Medium 5.9

    Integer overflow in libvpx

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…