Summary
It was discovered that libvpx did not properly handle certain malformed
WebM media files. If an application using libvpx opened a specially crafted
WebM file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libvpx | 1.5.0-2ubuntu1.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libvpx | 1.7.0-3ubuntu0.18.04.1 |
Vulnerabilities 6
-
Unscored —
A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.…
-
Unscored —
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer…
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial o…
-
Unscored —
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…