Summary
It was discovered that libvpx did not properly manage memory. An attacker
could possibly use this issue to cause applications using libvpx to
crash, resulting in a denial of service, or possibly execute arbitrary
code.
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | libvpx | 1.8.2-1ubuntu0.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | libvpx | 1.11.0-2ubuntu2.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | libvpx | 1.14.0-1ubuntu2.2 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libvpx | 1.5.0-2ubuntu1.1+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libvpx | 1.7.0-3ubuntu0.18.04.1+esm3 |
Vulnerabilities 1
-
Medium 5.4
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap …
References
-
report
https://ubuntu.com/security/CVE-2025-5283