26 results · Feed
-
High 8.8
Heap buffer overflow in libvpx
Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
-
Medium 5.4
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap …
-
Medium 5.9
Integer overflow in libvpx
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the return…
-
Medium 5.7
Heap overflow in libvpx
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
-
Unscored —
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
-
High 8.8
Electron affected by libvpx's heap buffer overflow in vp8 encoding
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
KEV Oct 2, 2023 -
Unscored —
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This cou…
-
Unscored —
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote infor…
-
Unscored —
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial o…
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information …
-
Unscored —
A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.…
-
Unscored —
A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted fi…
-
Unscored —
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.…
-
Unscored —
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.…
-
Unscored —
The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x…
-
Unscored —
libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 20…
-
Unscored —
libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote att…
-
Unscored —
Buffer overflow in the vp9_init_context_buffers function in libvpx, as used in Mozilla Firefox before 41.0 and Firefox …
-
Unscored —
Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox …
-
Unscored —
The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote…
-
Unscored —
Google Chrome before 43.0.2357.65 relies on libvpx code that was not built with an appropriate --size-limit value, whic…
-
Unscored —
The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x before 31.2, and Thunderbird 31.x before 31.2 al…
-
Unscored —
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) …
-
Unscored —
libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a den…
-
Unscored —
WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers t…