Skip to content
OpenAdvisories
Medium DSA-5722-1 1 CVE

libvpx - security update

Published Jun 26, 2024 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 11 libvpx 1.9.0-1+deb11u3
Debian · 12 libvpx 1.12.0-1+deb12u3

Vulnerabilities 1

  • Medium 5.9

    Integer overflow in libvpx

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…