Read the docs
Red Hat Security Advisory

RHSA-2020:4629

libvpx security update

Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 4 records

TI-2019-01740 CVE-2019-2126 · GHSA-jxxw-46w4-3vhv

Double free in Android

Priority MEDIUM 46

In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.05508 Published 2019-08-20 Partial fix CWE-415
TI-2019-06687 CVE-2019-9232 · GHSA-mxrh-wfcj-ww8f

Out-of-bounds read in Android

Priority MEDIUM 41

In libvpx, there is a possible out of bounds read due to a missing bounds check.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05085 Published 2019-09-27 Partial fix CWE-125
TI-2019-06821 CVE-2019-9371 · GHSA-9vpr-vrhc-8w49

Improper input validation in Android

Priority LOW 35

In libvpx, there is a possible resource exhaustion due to improper input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03138 Published 2019-09-27 Partial fix CWE-20
TI-2019-06881 CVE-2019-9433 · GHSA-45wr-h3w5-q72v

Improper input validation in Android

Priority LOW 34

In libvpx, there is a possible information disclosure due to improper input validation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0312 Published 2019-09-27 Partial fix CWE-20