Red Hat Security Advisory

RHSA-2024:5941

libvpx security update

Released 2024-08-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) libvpx-1.7.0-11.el8_10
Red Hat Enterprise Linux CRB (v. 8) libvpx-devel-1.7.0-11.el8_10

Fixes 2 records

TI-2024-04823 CVE-2024-5197 · GHSA-4h58-f788-v8pw

Integer overflow in libvpx

LOW 28

There exists interger overflows in libvpx in versions prior to 1.14.1.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00814 Published 2024-06-03 Partial fix · 1.14.1 CWE-190

TI-2023-05828 CVE-2023-6349

Heap overflow in libvpx

LOW 26

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.

CVSS 4.0MEDIUM 5.7 Local Low privileges User interaction EPSS 0.00365 Published 2024-05-27 Partial fix · 1.13.1 CWE-122