Skip to content
OpenAdvisories
Medium RHSA-2025:14140 1 CVE

Red Hat Security Advisory: libvpx security update

Published Aug 21, 2025 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream libvpx 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream libvpx-debuginfo 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream libvpx-debugsource 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::appstream libvpx-utils-debuginfo 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb libvpx-debuginfo 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb libvpx-debugsource 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb libvpx-devel 0:1.9.0-7.el9_4.2
Red Hat · RHEL 9.4 EUS rhel_eus:9.4::crb libvpx-utils-debuginfo 0:1.9.0-7.el9_4.2

Vulnerabilities 1

  • Medium 5.9
    CVE-2024-5197

    Integer overflow in libvpx

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…

    Chromium libvpx libvpx libvpx Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2291198
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14140.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-5197
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-5197
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-5197