TI-2019-06687 CVE-2019-9232 · GHSA-mxrh-wfcj-ww8f
Out-of-bounds read in Android
Priority MEDIUM 41
In libvpx, there is a possible out of bounds read due to a missing bounds check.
RHSA-2020:3876
libvpx security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvpx-1.3.0-8.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libvpx-devel-1.3.0-8.el7, libvpx-utils-1.3.0-8.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvpx-1.3.0-8.el7, libvpx-devel-1.3.0-8.el7, libvpx-utils-1.3.0-8.el7
- Red Hat Enterprise Linux Server (v. 7) libvpx-1.3.0-8.el7, libvpx-1.3.0-8.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libvpx-devel-1.3.0-8.el7, libvpx-devel-1.3.0-8.el7.ppc, libvpx-utils-1.3.0-8.el7
- Red Hat Enterprise Linux Workstation (v. 7) libvpx-1.3.0-8.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvpx-devel-1.3.0-8.el7, libvpx-utils-1.3.0-8.el7
Fixes 4 records
TI-2020-00033 CVE-2020-0034 · GHSA-96m3-53rw-386g
Out-of-bounds read in Android
Priority LOW 37
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation.
TI-2019-06881 CVE-2019-9433 · GHSA-45wr-h3w5-q72v
Improper input validation in Android
Priority LOW 34
In libvpx, there is a possible information disclosure due to improper input validation.
TI-2017-00368 CVE-2017-0393 · GHSA-m55f-r5cm-qv9m
A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker…
Priority LOW 27
A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot.