Skip to content
OpenAdvisories
Critical USN-7397-1 1 CVE

aom vulnerability

Published Mar 31, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Xiantong Hou discovered that AOM did not properly handle certain malformed
media files. If an application using AOM opened a specially crafted file, a
remote attacker could cause a denial of service, or possibly execute
arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS aom 1.0.0.errata1-3+deb11u1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS aom 3.3.0-1ubuntu0.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2024-5171

    heap buffer overflow in libaom

    Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the…

    libaom libaom aom aom Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-5171