Skip to content
OpenAdvisories
Medium RHSA-2025:14139 1 CVE

Red Hat Security Advisory: libvpx security update

Published Aug 20, 2025 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream libvpx 0:1.9.0-7.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream libvpx-debuginfo 0:1.9.0-7.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream libvpx-debugsource 0:1.9.0-7.el9_0.2
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream libvpx-utils-debuginfo 0:1.9.0-7.el9_0.2

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-5197

    Integer overflow in libvpx

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…

    Chromium libvpx libvpx libvpx Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2291198
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14139.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-5197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-5197
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-5197