Red Hat Security Advisory

RHSA-2025:9124

libvpx security update

Released 2025-06-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) libvpx-1.9.0-7.el9_0.1

Fixes 1 record

TI-2025-04746 CVE-2025-5283 · GHSA-j84v-78j2-55gh

Use after free in Google Chrome

LOW 25

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00642 Published 2025-05-27 Partial fix · 137.0.7151.55 CWE-416