TI-2024-04801 CVE-2024-5171 · GHSA-592c-fmq9-g63c
heap buffer overflow in libaom
Priority HIGH 82
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow.
aomedia
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
aomedia records in CISA KEVNo aomedia vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records
TI-2021-10877 CVE-2021-30475 · GHSA-867w-fmxg-m2g8
aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.
Priority MEDIUM 46
aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.
TI-2021-10876 CVE-2021-30474 · GHSA-5r4m-4q9j-5jhh
aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
Priority MEDIUM 46
aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
TI-2021-10875 CVE-2021-30473 · GHSA-jr38-ch73-ccgx
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
Priority MEDIUM 46
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
TI-2023-06284 CVE-2023-6879 · GHSA-fvcr-3mhq-rw2x
heap buffer overflow in libaom
Priority MEDIUM 44
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
TI-2020-18459 CVE-2020-36133 · GHSA-cw3p-3434-gw6r
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
Priority MEDIUM 42
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
TI-2020-18458 CVE-2020-36131 · GHSA-g8f8-rq6r-4rrh
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
Priority MEDIUM 42
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
TI-2020-18658 CVE-2020-36407 · GHSA-5fvj-fm55-q8qx
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
Priority MEDIUM 41
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
TI-2020-18456 CVE-2020-36129 · GHSA-w6cc-5mpf-4rmj
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
Priority MEDIUM 41
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
TI-2023-20701 CVE-2023-39616 · GHSA-8gm5-9276-cvrc
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the…
Priority MEDIUM 40
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
TI-2025-30543 CVE-2025-48174 · GHSA-f6x7-5x3c-j3rg
Integer overflow in aomedia libavif
Priority LOW 39
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.
TI-2020-18461 CVE-2020-36135 · GHSA-3mrv-v95f-r4rx
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
Priority LOW 32
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
TI-2020-18457 CVE-2020-36130 · GHSA-w9vw-69gr-j5w3
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
Priority LOW 32
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
TI-2020-18460 CVE-2020-36134 · GHSA-2rh7-96qm-4h8w
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
Priority LOW 31
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
TI-2025-30544 CVE-2025-48175 · GHSA-44mp-2g68-7wvv
Integer overflow in aomedia libavif
Priority LOW 29
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.