Skip to content
OpenAdvisories
Critical USN-6815-1 1 CVE

aom vulnerability

Published Jun 6, 2024 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Xiantong Hou discovered that AOM did not properly handle certain malformed
media files. If an application using AOM opened a specially crafted file, a
remote attacker could cause a denial of service, or possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS aom 3.8.2-2ubuntu0.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2024-5171

    heap buffer overflow in libaom

    Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the…

    libaom libaom aom aom Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-5171