Skip to content
OpenAdvisories
Medium RHSA-2024:9827 1 CVE

Red Hat Security Advisory: libvpx security update

Published Nov 25, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream libvpx 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream libvpx-debuginfo 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream libvpx-debugsource 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::appstream libvpx-utils-debuginfo 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::crb libvpx-debuginfo 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::crb libvpx-debugsource 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::crb libvpx-devel 0:1.9.0-8.el9_5
Red Hat · RHEL 9 enterprise_linux:9::crb libvpx-utils-debuginfo 0:1.9.0-8.el9_5

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-5197

    Integer overflow in libvpx

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…

    Chromium libvpx libvpx libvpx Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2291198
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9827.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-5197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-5197
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-5197