Red Hat Security Advisory

RHSA-2025:9126

libvpx security update

Released 2025-06-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) libvpx-1.7.0-10.el8_6.1
Red Hat Enterprise Linux AppStream E4S (v.8.6) libvpx-1.7.0-10.el8_6.1
Red Hat Enterprise Linux AppStream TUS (v.8.6) libvpx-1.7.0-10.el8_6.1

Fixes 1 record

TI-2025-04746 CVE-2025-5283 · GHSA-j84v-78j2-55gh

Use after free in Google Chrome

LOW 25

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00642 Published 2025-05-27 Partial fix · 137.0.7151.55 CWE-416